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Abstract. The theory of classical realizability is a framework in which we can develop 
the proof-program correspondence. Using this framework, we show how to transform into 
programs the proofs in classical analysis with dependent choice and the existence of a well 
ordering of the real line. The principal tools are: 

- The notion of realizability algebra, which is a three-sorted variant of the well known 
combinatory algebra of Curry. 

- An adaptation of the method of forcing used in set theory to prove consistency results. 
Here, it is used in another way, to obtain programs associated with a well ordering of R 
and the existence of a non trivial ultrafilter on N. 



Introduction 

When we want to obtain programs from mathematical proofs, the main problem is, natu- 
rally, raised by the axioms: indeed, it has been a long time since we know how to transform 
a proof in pure (i.e. without axioms) intuitionistic logic, even at second order [2l[7ll3]. 
The very first of these axioms is the excluded middle, and it seemed completely hopeless for 
decades. The solution, given by T. Griffin [5j in 1990, was absolutely surprising. It was an 
essential discovery in logic because, at this moment, it became clear that all other axioms 
will follow, as soon as we will work in a suitable framework. 

The theory of classical realizability is such a framework: it was developed in [l2l[13], where 

we treat the axioms of Analysis (second order arithmetic with dependent choice). 

In [15], we attack a more difficult case of the general axiom of choice, which is the existence 

of a non trivial ultrafilter on N ; the main tool is the notion of realizability structure, in 

which the programs are written in A-calculus. 

In the present paper, we replace it with the notion of realizability algebra, which has many 

advantages: it is simpler, first order and much more practical for implementation. It is a 

three-sorted variant of the usual notion of combinatory algebra. Thus, the programming 

language is no longer the A-calculus, but a suitable set of combinators ; remarkably enough, 

this is almost exactly the original set given by Curry. The A-terms are now considered only 

as notations or abbreviations, very useful in fact: a A-term is infinitely more readable than 
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its translation into a sequence of conibinators. The translation used here is new, as far as 
I know ; its fundamental property is given in theorem 11.21 

The aim of this paper is to show how to transform into programs, the classical proofs which 

use dependent choice and: 

i) the existence of a non trivial ultrafilter on N ; 

ii) the existence of a well ordering on M. 

Of course, (ii) implies (i) but the method used for (i) is interesting, because it can give 

simpler programs. This is an important point, because a new problem is appearing now, an 

important and very difficult problem: to understand the programs we obtain in this way, 

that is to explain their behavior. A fascinating, but probably long work. 

The logical frame is given by classical second order logic, in other words the (first order) 

theory of the comprehension scheme. However, since we use a binary membership relation on 

individuals, we work, in reality, in at least third order logic. Moreover, this is indispensable 

since, although the axiom of dependent choice on M can be expressed as a second order 

scheme, axioms (i) and (ii) cannot be expressed in this way. 

By using the method expounded in [11], we can obtain the same results in ZF. 

It seems clear to me that, by developing the technology of classical realizability, we shall 

be able to treat all "natural" axioms introduced in set theory. It is already done for the 

continuum hypothesis, which will be the topic of a forthcoming paper. In my opinion, the 

axiom of choice and the generalized continuum hypothesis in ZF do not pose serious issues, 

except this: it will be necessary to use the proper class forcing of Easton [3] inside the 

realizability model, and it will probably be very painful. 

A very interesting open problem is posed by axioms such as the existence of measurable 

cardinals or the determination axiom. 

But the most important open problem is to understand what all these programs do and, in 
this way, to be able to execute them. I believe that big surprises are waiting for us here. 
Indeed, when we realize usual axioms of mathematics, we need to introduce, one after the 
other, the very standard tools in system programming: for the law of Peirce, these are 
continuations (particularly useful for exceptions) ; for the axiom of dependent choice, these 
are the clock and the process numbering ; for the ultrafilter axiom and the well ordering of 
M, these are no less than read and write instructions on a global memory, in other words 
assignment. 

It seems reasonable to conjecture that such tools are introduced for some worthwhile pur- 
pose, and therefore that the very complex programs we obtain by means of this formalization 
work, perform interesting and useful tasks. The question is: which ones ? 
Remark. 

The problem of obtaining a program from a proof which uses a given axiom, must be set correctly 
from the point of view of computer science. As an example, consider a proof of a theorem of 
arithmetic, which uses a well ordering of ^'(N): if you restrict this proof to the class of constructible 
sets, you easily get a new proof of the same theorem, which does not use this well ordering any more. 
Thus, it looks like you simply have to transform this new proof into a program. 
But this program would be extracted from a proof which is deeply different from (and dramatically 
more complicated than) the original one. Moreover, with this method, it is impossible to associate a 
program with the well ordering axiom itself. From the point of view of computer science, this is an 
unacceptable lack of modularity: since we cannot put the well ordering axiom in a program library, 
we need to undertake again the programming work with each new proof. 
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With the method which is explained below, we only use the A-terni extracted from the original proof. 
Therefore, this term contains an unknown instruction for the well ordering axiom on P(N), which is 
not yet implemented. Then, by means of a suitable compilation, we transform this term into a true 
program which realizes the initial theorem. 

As a corollary of this technology, we obtain a program which is associated with the well ordering 
axiom, which we can put in a library for later use. 

1. REALIZABILITY ALGEBRAS 

A realizability algebra is composed of three sets: A (the set of terms), 11 (the set of stacks), 
A * n (the set of processes) with the following operations: 

i^iV) '^ (0^ from A^ into A (application) ; 
(^, vr) >—^^.TT from A x 11 into 11 (push) ; 
(^, tt) i-^ ^ • vr from A x 11 into A • 11 (process) ; 
TT I— 7- k^ from n into A (continuation). 

We have, in A, the distinguished elements B,C, E, I, K, W, CC, called elementary combina- 
tors or instructions. 

Notation. The term (. . . (((0^i)^2) • • ■)Vn will be also denoted by (C)^i% ■ ■ -Vn or even 
^Vim ■■■Vn- For example: ^r/C = (OvC = (^v)C = ((O^)C- 

We define on A* 11 a preorder relation, denoted by ^. It is the least reflexive and transitive 
relation such that we have, for any ^, ry, C G A and vr, tu € 11: 

(^)ri -kTT y ^^-krj .TT. 
K -k ^ .rj .TT >- ^-kTT. 

E -k^ .rj .IT >- (^)r/ -k vr. 

W-k^.rj.iry^-krj.rj.TT. 

C-k^.rj.(^.Tr>-S^-k(.r].Tr. 

B-k^. 7]. (.Try (0(^)C*7r. 

CC * ^ . vr >- ^ * Ktt . vr. 

kj^ -k^ .zu >~ ^*7r. 

Finally, we are given a subset X of A • 11 which is a terminal segment for this preorder, 

which means that: p G X, p' ^ p ^ p' € X. 

In other words, we ask that X be such that: 

(S,)ri •7r^X^,^*77.7r^X. 

/•^.vr^ X^^*7r ^ X. 

E'*^.r/.7r^X=^ (^)r] * vr ^ X. 
W *^ .rj .TT ^ Jl ^ ^-krj .rj .TT ^ X. 
C-kS,.r].(,TT(^±^S,-k(.r].TT<^±. 
B-kl.rj.l.TT (^±^ (0(^)C*7r^ X. 
CC*.^.7r^X^^*k7r.vr^X. 
k7r*C'^^-lL=^'?*7r^X. 
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C-terms and A-terms. We call C-term a term which is built with variables, the elementary 
conibinators S, C, E, /, K, W, CC and the application (binary function). A c-term is called 
closed if it contains no variable ; it will then also be called proof-like ; a proof-like term has 
a value in A. 

Given a C-term t and a variable x, we define inductively on t, a new c-term denoted by Ax t. 
To this aim, we apply the first possible case in the following list: 

1. Xxt = {K)t if t does not contain x. 

2. Xxx = I. 

3. Xxtu = {CXx{E)t)u if u does not contain x. 

4. Xxtx = {E)t if t does not contain x. 

5. Xxtx = {W)Xx{E)t (if t contains x). 

6. Aj;(t)(u)f = Xx{B)tuv (if uf contains x). 

We easily see that this rewriting is finite, for any given C-term t: indeed, during the rewriting, 
no combinator is introduced inside t, but only in front of it. Moreover, the only changes in t 
are: moving parentheses and erasing occurrences of x. Now, rules 1 to 5 strictly decrease 
the part of t which remains under Xx, and rule 6 can be applied consecutively only finitely 
many times. 

The X-terms are defined as usual. But, in this paper, we consider A-terms only as a nota- 
tion for particular C-terms, by means of the above translation. This notation is essential, 
because almost every C-term we shall use, will be given as a A-term. Theorem 11.21 gives the 
fundamental property of this translation. 

Remark. We cannot use the well known XS'-translation of A-calculus, because it does not satisfy 
Theorem [L2l 



Lemma 1.1. If t is a C-term with the only variables x,yi, . . . , yn, and if ^,r]i, . . . ,rjn G ^, 
then: (Axt)[r7i/yi, . . . ,r/„/y„] *^ . tt >~ t[^/x,?7i/yi, . . . ,r/„/y„] *7r. 

Proof. To lighten the notation, let us put u* = u[rii/yi, . . . ,r]n/yn] for each C-term u ; 

thus, we have: 

u*[^/x] =u[i/x,r]i/yi,...,r]n/yn]- 

The proof is done by induction on the number of rules 1 to 6 used to translate the term 

Xxt. Consider the rule used first. 

If it is rule 1, then we have (Ax t)* • ^ . vr = {K)t* -k ^ .tt y t* -kn 

= t[(,/x, r]i/yi, . . . , r]n/yn] * tt since x is not in t. 

If it is rule 2, we have t = x and (Axt)**^ . vr = I-k^ . vr >- ^-kn = t[^/x,r]i/yi, . . . ,r]n/yn]*'^- 

If it is rule 3, we have t = uv and (Ax i)* • ^ . vr = {CXx{E)u)*v* * ^ . vr 

>- C * {Xx{E)u)* .V* .^.TT y {Xx{E)u)* * £, . V* . TT y {E)u*[^/x] * v* .tt (by induction 

hypothesis) >- E -k u*[^/x\ .v*.'k>~ {u*[^/x\)v* -k it = t[^/x, rji/yi, . . . , r]n/yn] * ^r since x is 

not in V. 

If it is rule 4, we have t = ux and (Ax t)* * ^ . vr = {E)u* •k^.TryE-ku*.^.Tr>~ u*^ -k vr 

= t[^/x, rji/yi, . . . , rjn/yn] * ^r since u does not contain x. 

If it is rule 5, we have t = ux and (Axt)*^^ . vr = {W Xx{E)u)* -k^ . vr >- W'k{Xx{E)u)* . ^ . vr 

>- {Xx{E)u)* * ^ . ^ . vr ^ {E)u*[^/x\ • ^ . vr (by induction hypothesis) 

>- E-k u*[^/x\ . C . vr ^ {u*[i/x\)i * vr = t[i/x, r/i/yi, . . . , ??„/y„] • vr. 

If it is rule 6, we have t = {u){v)w and (Axt)* *^ . vr = {Xx{B)uvw)* *^ . vr 

>- {B)u* [S, / x]v* [£, / x]w* [^ / x] -kTT (by induction hypothesis) 
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•^ Bi.u*[^/x\ . v*[C/x] . w*[C/x] . TT >- {u*[^/x]){v*[^/x])w*[^/x]*7r 

= t[^/x,7]i/yi,...,7]n/yn]*T^- D 

Theorem 1.2. If t is a C-term with the only variables xi, . . . , Xn, and if S,i, ■ ■ ■ ,£,n £ A, 
then Xxi . . . Xxnt •.^i ^„ . vr :^ t[^i/xi, . . . ,^n/xn] ^vr. 

Proof. By induction on n ; the case n = is trivial. 

We have Axi . . . Ax„_iAx„ t *^i S,n-1 •Cn-'^ ^ (AXni)[^i/xi, . . . ,^„_i/x„_i] -k^n'T^ 

(by induction hypothesis) >- t[^i/xi, . . . ,^n-i/xn-i,^n/xn] ^vr by lemma [TTTl D 

Natural deduction. Before giving the formal language that we shall use, it is perhaps 
useful to describe informally the structures (models) we have in mind. They are second 
order structures, with two types of objects: individuals also called conditions and predicates 
(of various arity). Since we remain at an intuitive level, we start with a full model which 
we call the ground model. Such a model consists of: 

• an infinite set P (the set of individuals or conditions) . 

• the set of k-aiy predicates is V{P ) (full model). 

• some functions from P into P. 

In particular, there is an individual and a bijective function s : P — )■ (P \ {0}). This 
enables us to define the set of integers N as the least set which contains and which is 
closed for s. 

There is also a particular condition denoted by 1 and an application denoted by a from P^ 
into P. 

• some relations (fixed predicates) on P. In particular, we have the equality relation on 
individuals and the subset C of non trivial conditions. 

C[pAq] reads as: "p and q are two compatible conditions". 

We now come to the formal language, in order to write formulas and proofs about such 

structures. It consists of: 

• individual variables or variables of conditions called x,y, . . . or p, g, . . . 

• predicate variables or second order variables X,Y, . . . ; each predicate variable has an 
arity which is in N. 

• function symbols on individuals f,g,... ; each one has an arity which is in N. 

In particular, there is a function symbol of arity k for each recursive function / : N'^ — ?> N. 
This symbol will also be written as /. 

There is also a constant symbol 1 (which represents the greatest condition) and a binary 
function symbol a (which represents the inf of two conditions). 
The terms are built in the usual way with variables and function symbols. 
The atomic formulas are the expressions X(ti, . . . , tn), where X is an n-ary predicate vari- 
able, and ti, . . . ,tn are terms. 
Formulas are built as usual, from atomic formulas, with the only logical symbols — 7>,V: 

• each atomic formula is a formula ; 

• if A,B are formulas, then A ^ B is a formula ; 

• if y4 is a formula, then \/x A and \/X A are formulas. 
Notations. 

The formula Ai -^ {A2 -^ (. . . {An -^ B) . . .) will be written Ai,A2,...,An^B. 
The usual logical symbols are defined as follows: 
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{X is a predicate variable of arity 0, also called propositional variable) 

± = \fX X ; ^A = A ^ ± ; A\/ B = {A -^ ±), {B ^ ±) -^ ± ; A A B = (A, B ^ ±) ^ ± ; 

3y F = Vy(F ^^ _L) ^' _L (where y is an individual or predicate variable). 

More generally, we shall write 3 y{Fi, . . . , F^} for V y(-Fi, . . . , F^ ^^ _L) ^- _L. 

We shall sometimes write F for a finite sequence of formulas Fi , . . . , Ffc . 

Then, we shall also write 3 y{F} and V y(F ^ ±) ^ ±. 

X = y is the formula \/Z{Zx — ?• Zy), where Z is a unary predicate variable. 

The rules of natural deduction are the following (the Aj's are formulas, the Xj's are variables 

of C-terms, t,u are C-terms): 

i. Xi I Ai, . . . , Xn ■ An i~ Xi '. Ai. 

2. xi : Ai,. . . ,Xn ■■ An^ t : A ^ B, xi : ^i, . . . , x„ : A„ h n : ^ =^ xi : Ai, . . . , x„ : 

An'rtu: B. 

?,. xi : Ai, . . . ^Xn '■ An-,x : A\- t : B =^ xi : Ai, . . . ,Xn '■ An\~ \xt : A ^ B. 

4. xi : ^1, . . . , x„ : An \- t : A =^ xi : Ai, . . . , Xn : An h t : Vx ^ for every variable X 
(individual or predicate) which does not appear in Ai, . . . ,An. 

5. xi : Ai, . . . ,x„ : An \- t -.^xA => xi : ^i, . . . ,x„ : An \~ t : A[t/x] where x is an 
individual variable and r is a term. 

6. xi : Ai, . . . , x„ : An H t : \/X A =^ xi : Ai, . . . , x„ : An \- t : A[F/Xyi . . .yk] where X 
is a predicate variable of arity k and F an arbitrary formula. 

Remark. 

In the notation A[F/Xyi . . . yk], the variables yi, . . . ,yk are bound. A more usual notation is: 

A[)yi . . . )<yk F/X]. I prefer this one, to avoid confusion with the A defined for C-terms. 

Realizability. Given a realizability algebra A = (A,n, A*n, X), a A-model Ai consists 
of the following data: 

• An infinite set P which is the domain of variation of individual variables. 

• The domain of variation of fe-ary predicate variables is ■p(n) . 

• We associate with each k-ary function symbol /, a function from P into P, denoted by 
/ or even / if there is no ambiguity. 

In particular, there is a distinguished element in P and a function s : P —?■ P (which is the 

interpretation of the symbol s). We suppose that s is a bijection from P onto P\ {Oj.Then, 

we can identify s"0 G P with the integer n, and therefore, we have N C P. 

Each recursive function / : N ^ N is, by hypothesis, a function symbol. Of course, we 

assume that its interpretation / : P — t- P takes the same values as / on N . 

Finally, we have also a condition 1 G P and a binary function a from P^ into P. 

A closed term (resp. a closed formula) with paravneters in the -model M. is, by definition, a 

term (resp. a formula) in which all free occurrences of each variable have been replaced with 

a parameter, i.e. an object of the same type in the model ^A^. a condition for an individual 

variable, an application from P into 'P(n) for a k-aiy predicate variable. 

Each closed term t, with parameters in Ai has a value t £ P. 

An interpretation I is an application which associates an individual (condition) with each 

individual variable and a parameter of arity k with each second order k-ary variable. 

I[x <— p] (resp. I[X ■(— X]) is, by definition, the interpretation obtained by changing, in Z, 

the value of the variable x (resp. X) and giving to it the value p G P (resp. X G V{Tl)^ ). 
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For each formula F (resp. term t), we denote by F (resp. t ) the closed formula (resp. 
term) with parameters obtained by replacing each free variable with the value given by X. 

For each closed formula F with parameters in A^, we define two truth values: 

IIF^II C n and \F^\ C A. 

\F^\ is defined as follows: i G \F^\ ^ (Vvr G ||F^||)^*7r G X. 

II-P-^II is defined by recurrence on F\ 

• F is atomic: then F^ has the form X{ti, . . . ,tk) where X : P^ -^ ^(n) and the tj's are 
closed terms with parameters in ^A. We set ||Af(ii, . . . ,tA;)|| = Af(ti, . . . ,tk). 

• F = A ^ B: we set \\F^\\ = {^ . vr ; ^ G \A^\,n £ \\B^\\}. 

• F = \/xA: we set ||F^|| = U{p^[^^Pl|| ; p G P}. 

• F = MX A: we set ||F^|| = UIM^^^^'^^II ; ^ G 7^(0)^"} if X is a A;-ary predicate 
variable. 

Notation. We shall write i \r ^ for ^ G |F|. 

Theorem 1.3 (Adequacy lemma). 

// xi : Ai, . . . ,Xk '■ Ai^\- t : A and if ^i [|- Ai[, . . . ,Ck \\- ^, where X is an interpretation, 

then t[^i/xi,...,Ck/xk] h A^ . 

In particular, if A is closed and if \- t : A, then t \\- A. 

Proof. By recurrence on the length of the derivation of xi : Ai, . . . ,Xn '■ An \- t : A. 
We consider the last used rule. 

1. We have t = Xi,A = A^. Now, we have assumed that ^j \\- Af ; and it is the desired 
result. 

2. We have t = uv and we already obtained: 

Xi : Ai, . . . ,Xk '■ Ak\- u : B ^ A and xi : Ai, . . . ,Xk : A^ \- v : B. 

Given n G H^"^!!, we must show {uv)[^i/xi, . . . ,£,k/xk] ^vr G X. 

By hypothesis on X, it suffices to show u[6,i/xi, . . . ,Ck/xk] *v[6,i/xi, . . . ,^k/xk] . vr G X. 

By the induction hypothesis, we have ^[^i/xi, . . . ,Ck/xk] \[- B^ and therefore: 

v[ii/xi,...,ik/xk]-T^ ^ \\B^ ^ A^\\. 

But, by the induction hypothesis, we have also u[$,i/xi, . . . ,^k/xk] \[- B^ — )• A^ , hence the 

result. 

3. We have A = B^-C,t = Xxu. We must show Axn[^i/xi, . . . ,Ck/xk] \\- B^ -^ C^ ; 
thus, we suppose ^ \\- B^ , vr G ||C-^|| and we have to show \xu[^i/xi, . . . ,Cfc/a^fc]*C • vr G X. 
By hypothesis on X and lemma [LT| it suffices to show u[^/x, ^i/xi, . . . , Ck/xk] * vr G X. 
This follows from the induction hypothesis applied to xi : Ai, . . . , Xn '■ A^, x : B \- u : C . 

4. We have A = VA B, and X is not free in Ai, . . . , An- We must show: 
t[^i/xi,...,Ck/xk]hiMXBf, i.e. t[^i/xu...,^k/xk]hB^w-ithJ = X[X^X]. But, 
by hypothesis, ^t \\- A-f therefore ^t \\- Af: indeed, since A is not free in Ai, we have: 
ll^f II = ll^f^lj. Then, the induction hypothesis gives the result. 

6. We have A = B[F/Xyi . . . y„,] and we must show: 

t[^i/xi,... ,ik/xk] |]-5[F/Ayi...y„]^ assuming that t[ii/xi, . . . ,ik/xk] ||- (VA S)^. 

This follows from lemma [L4l below. □ 

Lemma 1.4. \\B[F/Xyi . . . y„]^|| = ||5^[^^-*']|| where Af : P" ^ V{U) is defined by: 

A'(pi,...,p„) = ||F^[^i^Pi'-'?^"^P"l||. 

Proof. The proof is by induction on B. That is trivial if A is not free in B. Indeed, the 
only non trivial case of the induction is i? = MY C ; and then, we have Y ^ X and: 
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\\B[F/Xyi . ..ynfW = \\{\/YC[F/Xyi . . .y„]f || = U3; \\C[F/Xyi . . . y„]^[^^^l||. 

By induction hypothesis, this gives \Jy\\C^^^^^^^^^^^\, that is \Jy\\C^^^'-^^^^'-y^\\ i.e. 

||(vycf[^^^i||. D 

Lemma 1.5. Let X,Y cH be truth values. If tt £ X, then k.„ \\- X ^ y. 

Proof. Suppose ^ |]- <^ and p £ y ; we must show k^ *^ . p E X, that is .^*7r G X, which 
is clear. D 

Proposition 1.6 (Law of Peirce). CC \\-yX\/Y{{{X ^Y)^ X) ^ X). 

Proof We want to show that CC \\- {{X -^y) ^ X) -^ X. Thus, we take (, \\- {X ^ y) -^ 
X and TT £ X ; we must show that CC * .^ . vr G X, that is .^ * k^ . tt G X. By hypothesis on 
^ and vr, it is sufficient to show that k^^ |]- ,^ — )• 3^, which results from lemma [T31 □ 

Proposition 1.7. 

i) // ^hA^ B, then yri{r, \^A^ir, \\- B). 
ii) // "ii^ir] \^A^ir] |^ B), then {E)i \rA^B. 

Proof. 

i) From ^ry • vr ;^ ^ * r/ . vr. 
ii) From (E)$^-krj .tt y S^rj-kn. □ 



Remark. Proposition ll.Tl shows that ^ \\- A ^i- B is "almost" equivalent (i.e. up to an 77-expansion 
ofOto \fr,{r,^A^in^B). 

Predicate symbols. In the following, we shall use extended formulas which contain predicate 

symbols (or predicate constants) R,S, . . . on individuals. Each one has an arity, which is 

an integer. 

In particular, we have a unary predicate symbol C (which represents the set of non trivial 

conditions). 

We have to add some rules of construction of formulas: 

• If F is a formula, R is a n-ary predicate constant and ti, . . . ,tn are terms, then 
R(ti, . . . ,tn) ^ F and R(ti, . . . , t„) 1-^ F are formulas. 

• T is an atomic formula. 

In the definition of a yl- model Ai, we add the following clause: 

• With each relation symbol R of arity n, we associate an application, denoted by Rj^ or 
R, from P" into V{A). We shall also write |R(pi, . . . ,Pn)\, instead of R(pi, . . . ,Pn), for 
pi,...,Pn£ P. _ 

In particular, we have an application C : P ^^ ^^{A), which we denote as |C[p]|. 

We define as follows the truth value in A4 of an extended formula: 

||T||=0. 

||(R(ti, ...,tn)^ FfW = {t.7r;t£ IR(tf , . . . , t^)|,^ G ||P^||}. 
||(R(ti, ...,tn)^ FfW = \\F^\\ if / G \R{tl ...,tl)\; 
||(R(ti,...,t„) ^ F)^\\ = otherwise. 

Proposition 1.8. 

i) Xx{x)I |^VXVxi...Vx„[(R(xi,...,x„) ^X) ^ (R(xi,...,x„) ^X)]. 
ii) If we have |R(pi, . . . ,p„)| / ^ / G |R(pi, . . . ,p„)| for every pi, ... ,pn G P, then: 
K 1^ VXVxi . . . Vx„[(R(xi, ...,Xn)^X)^ (R(xi, . . . , x„) ^ X)]. 
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Proof. Trivial. □ 

Remark. By means of proposition 11.81 we see tlrat, if the application R : P" — > V{A) takes only 

the values {/} and 0, we can replace R(ti, . . . , in) -^ F with R(ii, . . . , tn) ^ F. 

We define the binary predicate ~ by putting \p — q\ = {1} if p = q and |p ~ g| = if 

p^q. 

By the above remark, we can replace p c^ q ^ F with p c^ q >-^ F. Proposition 11.91 shows 

that we can also replace p = q ^ F with p c^ q >—^ F. 

Notations. We shall write p = q >-^ F instead of p c^ q^^ F. Thus, we have: 

Up = q I— )• F|| = ||F|| \i p = q ] \\p = q^^F\\=% li p ^ q. 

We shall write p ^ q for p = q i— > _L. Thus, we have: 

\\p / g|| = n if p = g and \\p 7^ 9|| = if p ^ 9- 

Using p = q >-^ F instead of p = q ^ F, and p ^ q instead of p = g — )• _L, greatly 

simplifies the computation of the truth value of a formula which contains the symbol =. 

Proposition 1.9. 

i) Xxxl 1^ VXVxVy((x = y ^ X) ^ {x = y ^ X)) ; 
ii) XxXyyx |]-VXVxV2/((x = y ^ X),x = y ^ X). 

Proof. 

i) Let a,b £ P , XcIl,^\\-a = b^X and vr G ||a = 6 1-^ -^||. 

Then, we have a = b, thus / \\- a = b, therefore ^ • / . vr G X, thus Xx xl -k ^ . n G X. 
ii) Now let rj |]- (a = 6 1— ?> X), C \\- a = b and p G ||<^||- 
We show that XxXy yx-kr] . Q . p £ X in other words C,-kr} . p £ X. 
If a = 6, thenr/ \^X, ( \\-yY{Y ^Y). We have r/ . p G p ^ A"!!, thusC*r].p£ X. 
If a ^ b, then C Ij- T ^^ X, thus C-kij . p e JL. 
In both cases, we get the desired result. D 

Remark. 

Let i? be a subset of P'^ and Iji ■ P^ -^ {0, 1} its characteristic function, defined as follows: 

Ir{pi, . ■ . ,Pn) = 1 (resp. =0) if (pi, . . . ,p„) G R (resp. (pi, . . . ,_p„) ^ i?). 

Let us define the predicate R in the model A4 by putting: 

\R{pi, ■ . ■ ,Pn)\ = {1} (resp. = 0) if (pi, . . . ,p„) G i? (resp. (pi, . . . ,p„) ^ i?). 

By propositions 11.8 1 and 11.91 we see that R{xi, . . . ,x„) and lji{xi, . . . ,x„) = 1 are interchangeable. 

More precisely, we have: / |]-VXVa:i . . .Vxn{{R{xi, . . . ,x„) i-> X) f-> (1^(0:1, . . . ,x„) = 1 M^ X)). 

For each formula j4[xi, . . . ,Xk], we can define the fc-ary predicate symbol Na, by putting 

\Na{pi, ■ ■ ■ ,Pk)\ = {^n] TT G ||A[pi, . . . ,p/c]||}. Proposition 11.101 below shows that Na and 

-1^ are interchangeable ; this may simplify truth value computations. 

Proposition 1.10. 

i) / |]- Vxi . . . Vxfc(AOi(a;i, . . . , Xfc) -> ^A{xi, ... , Xk)) ; 
ii) CC \\-yxi . . .\/xkiiNA{xi, . . . ,Xk) ^> X) -^ A{xi, . . . ,Xk)). 

Proof. 

i) Let pi,... ,pk e P, IT e \\A{pi,... ,pk)\\, ^ \\-A{pi,... ,pk) and p G II. We must show: 
/ * k^ . ^ . p G X, that is ^ * vr G X, which is obvious. 

u) Let r] \\- Na{pi, ■■■ ,Pk) ^ -^ and vr G ||A(pi, ... ,pjt)||. We must show: 
CC*ry . vr G X, i.e. ?7* Ktt . vr G X, which is clear, since k^^ G |A^a(pi, • • • jPfc)!- D 
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Fixed point combinator. 

Theorem 1.11. Let Y = AA with A = XaXf{f){a)af. Then, we have Y*^ . vr y C*Y^ . vr. 
Let f : P^ ^ P such that f{x,y) = 1 is a well founded relation on P. Then: 
i) Y |]-VX{Vx[Vy(/(?/,x) = I ^ Xy) ^ Xx] -^ \/xXx}. 
ii)Y |^VXi...VXfc 

{yx[yy(Xiy,...,Xky -^ f{y,x) / l),Xix,... ,XkX -^ ±] -^\/x{Xix, . . . ,XkX -^ ±)}. 

Proof. The property Y^^.vr^^^Y^.vr is immediate, from theorem ll.2[ 
i) We take X : P ^ V(n), p £ P and ^ If Vx[Vy(/(y, x) = 1 ^ Xy) ^ Xx]. We show, by 
induction on the well founded relation /(x, y) = 1, that Y * ^ • vr E X for every vr G Xp. 
Let vr € <^p ; from (i), we get Y^^.tt ;^ ^•Y^.tt and thus, it is sufficient to prove that 
.^•Y^ . vr G X. By hypothesis, we have S, |]- Vy(/(y,p) = 1 i-^ Xy) — )■ Xp ; thus, it suffices to 
show that Y^ \\- f{q,p) = 1 i— )• Xq for every q £ P. This is clear if f{q,p) ^ 1, by definition 

of !-)>. 

If HQiV) = 1) we must show Y^ \\- Xq, i.e. Y*^ . p G X for every p G ^g. But this follows 

from the induction hypothesis. 

ii) The proof is almost the same: take Xi, . . . ,Xj, : P ^ 'P(Il), p £ P and 

^ \\- \/x[yy{Xiy, . . . , Xii-y — )• f{y, x) / 1), Xix, . . . , ^Y^x ^^ X]. We show, by induction on the 

well founded relation /(x, y) = 1, that Y * ^ . vr G X for every vr G \\Xip, . . . , Xf^p — > X|[. 

As before, we have to show that: Y^ \\- Xiq, . . . , X^q -^ f{q,p) / 1 for all g G P ; 

this is obvious if f{q,p) ^ 1. If f{q,p) = 1, we must show Y^ \\- Xiq, . . . , Xf^q — > X, or 

else: 

Y -k S, • p G X for every p G \\Xiq, . . . , X/^q — )• X|[. But this follows from the induction 

hypothesis. D 

Integers, storage and recursive functions. Recall that we have a constant symbol 

and a unary function symbol s which is interpreted, in the model A^ by a bijective function 

s:P^{P\{0}). 

And also, that we have identified s"0 with the integer n ; thus, we suppose N C P. 

We denote by int(x) the formula \/X(yy{Xy — > Xsy),XQ — )• Xx). 

Let u = {un)neN be a sequence of elements of A. We define the unary predicate symbol e„ 

by putting: |e„(s'^0)| = {n„} ; |e„(p)| = if p ^ N. 

Theorem 1.12. Let Tu,Su £ A be such that Su \{- (T ^ ^),T — > X and: 

Tu-k (f) . V . T: )^ V -k Su • 4> ' Uq ' T^ ; Su * 4^ ' Un • T^ y 4^ * Un+1 • ^^ 

for every v,(j),ijj £ K and vr G II. Then: 
Tu If VXVx[(e«(x) -^ X), int{x) -^ X]. 
Tu is called a storage operator. 

Proof. Let p £ P, (f) \\- eu{p) -^ X, v \\- int(p) and vr G ||^||. We must show Tu*(j) . v .tt £ 
X i.e. 1/ -k Su ' (p -uq .TT £ Jl. 

• If p ^ N, we define the unary predicate Y by putting: 

Y{q) = T if g G N ; Y{q) = T ^ X if g ^ N. 

Thus, we have obviously cp If ^(0) aiid uq . vr G ||y(p)||. 

But, by hypothesis on v, we have v jf \/y{Yy -^ Y sy),YQ — > Yp. 

Thus, it is sufficient to show that: 

Su If ^y{Yy -^ Ysy), i.e. Su |f Y{q) -^ Y{sq) for every q £ P. 
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This is clear if q G N, since we have ||y(sg)|| = 0. 

If g ^ N, we must show Su \\- (T —^ _L), T ^- _L, which fohows from the hypothesis. 

• If p G N, we have p = s^O ; we define the unary predicate Y by putting: 

||ys*0|| = {up-i . vr} for < i < p and \\Yq\\ = if g ^ {s*0; 0<i<p}. 

By hypothesis on v, (/>, vr, we have: 

u\'ryyiYy^Ysy),YO^YsPO; |^ FO ; uq .tt e \\YsPO\\. 

Thus, it suffices to show that Su \\- yy{Yy — > Ysy), i.e. Su \\- Yq — )• Ysq for every q £ P. 

This is clear if g ^ {-5*0; < z < p}, since then ||ysg|| = 0. 

If q = s*0 with i < p, let S, \\- Yq ; we must show Su*C • lip-j-i . vr G X. 

But we have Su* £, • Up-j-i . vr >- ^ * Wp-i • vr which is in X, by hypothesis on ^. □ 

Notation. We define the closed C-terms = XxXyy ; a = \n\f\x{f){n)fx ; and, for 

each n G N, we put n = (o")"0. We define the unary predicate symbol ent(x) by putting: 

|ent(n)| = {n} if n G N ; 

|ent(p)| =0 ifp^ N. 

In other words, ent(x) is the predicate eu{x) when the sequence u is (n)„gN- 

Theorem 1.13. 

We put T = XfXn{n)SfO, with S = XgXx{g){cr)x. Then, we have: 
i) T If VXVx((eni(x) -^ X), int{x) -^ X). 
ii) / [|- Vx((ent(x) -^int{x)). 

Therefore, T is a storage operator (theorem II. 12p . 

Proof. 

i) We immediately have, by theorem 11.21 

Ti.(t).v.T:>-vkS .<i).Q.T: ] S*7p. {a)''0 .iryip* (<7)"+^0 . vr 
for every 1^,4), ip G A and vr G II. 

Now, we check that S* |]- (T ^ X), T ^ X: indeed, if ^ |]- T — > X, then S -k ^ .tj .tt >~ 
^ * (T?7 . vr G X for every 7/ G A and vr G II (by theorem II. 2p . 
Then, the result follows immediately, from theorem 11.121 

ii) We must show I \\- ent(p) — >■ int(p) for every p £ P. We may suppose p G N (otherwise 
ent(p) = and the result is trivial). Then, we must show: 
I^a'PO. p G X knowing that p G ||int(sPO)||. 

Therefore, we can find a unary predicate X : P ^ 7^(11), (p \\-yy{Xy -^ Xsy), uj \\- XO and 
vr G ||Xs^O|| such that p = (j) .u .n. We must show {(7)^0 -k (p . w . vr G X. In fact, we show 
by recurrence on p, that (o")P0 • . tj . vr G X for all vr G ||XsPO||. 

If p = 0, let vr G ||^0|| ; we must show 0*0 . w . vr G X, i.e. uj-kn G X, which is clear, since 
u If XO. 

To move up from p to p + 1, let vr G ||Xs*'+-'^0||. We have: 
aP^^O -k(p .UJ .TT = (a) (cr)^O -k <f> .ui .tt >~ a * a^O . (p .uj .tt >- cp-k {aPQcpuj . vr. 
But, by induction hypothesis, we have cr^O * (p .uo . p £ X for every p G ||XsPO||. It follows 
that {aP'd)(puj Ij- XsPQ. Since cp |]- Xs^O -^ Xs^+^O, we obtain (p * {aPO)(puj . vr G X. D 

Theorem 11.131 shows that we can use the predicate ent(x) instead of int(x), which greatly 
simplifies many computations. In particular, we define the universal quantifier restricted to 
integers \/x^^^ by putting Vx^^F = Vx(int(x) — > F). 

Thus, we can replace it with the universal quantifier restricted to ent{x) defined as follows: 
y^ent^ = Vx(ent(x) -^ F). Then, we have ||Vx™*F|| = {n . vr; n G N,vr G ||F[s"0/x]||}. 
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Therefore, the truth value of the formula Vx'^ F is much simpler than the one of the 
formula Vx F. 

Theorem 1.14. Let : N — )■ N 6e a recursive function. There exists a closed X-term 6 
such that, if m €z N, n = (p{m) and f is a X-variable, then 9m f reduces into fn by weak 
head reduction. 

This is a variant of the theorem of representation of recursive functions by A-terms. It is 
proved in [13]. 

Theorem 1.15. Let ^ : N'^ — )• N 6e a recursive function. We define, in M, a function 
symbol f, by putting f{s"^^0, . . . ,s"^'^0) = s"0 with n = 4'{mi, . . . ,mk) ; we extend f on 
P \ N in an arbitrary way. Then, there exists a proof -like term 9 such that: 
9 |]-Vxi . . . Vxfc[ini(xi), . . . , int{xk) -^int{f{xi,. . .,Xk))]. 

Proof. For simplicity, we assume /c = 1. By theorem 11.131 it suffices to find a proof-like 

term 9 such that 9 |]- Vx[ent(x), (ent(/(x)) ^ ±) ^ _L]. In other words: 

9 |]-ent(p), (ent(/(p)) — >■ _L) — )■ _L for every p G P. 

We can suppose that p = s™0 (otherwise, — ent(p)| = and the result is trivial). 

Thus, we have ent(p) = {m} ; we must show: 

* m . ^ . TT G X for ah TT G n and ^ \\- ent(s"'0) — > ±, with n = cj){ni). 

Take the A-term 9 given by theorem 11.141 From this theorem, we get: 

9-krn.^.TT >- ^*n.7r, which is in X, by hypothesis on ^. □ 

Remark. We have now found proof-like terms which realize all the axioms of second order arith- 
metic, with a function symbol for each recursive function. 

2. Standard realizability algebras 

A realizability algebra A is called standard if its set of terms A and its set of stacks 11 are 

defined as follows: 

We have a countable set XIq which is the set of stack constants. 

The terms and the stacks of A are finite sequences of elements of the set: 

noU{B,C,E,I,K,W,CC,<;,x,x'XU,U ■} 
which are obtained by the following rules: 

• B, C, E, I, K, W, CC, ?, X, x' are terms ; 

• each element of IXq is a stack ; 

• if ^, 7/ are terms, then {^)r] is a term ; 

• if .^ is a term and vr a stack, then ^ . vr is a stack ; 

• if vr is a stack, then k[7r] is a term. 

A term of the form k[7r] is called continuation. It will also be denoted as k^. 

The set of processes of the algebra A is Axil. 

If ^ € A and vr G 11, the ordered pair (^, vr) is denoted as ^ * vr. 

Therefore, every stack has the form tt = ^i Cn •'^o, where Ci; • • • i ?n £ A and ttq G Hq 

(ttq is a stack constant). Given a term r, we put: 

We choose a recursive bijection from 11 onto N, which is written vr i— ?> Htt. 
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We define a preorder relation y, on A •11. It is the least reflexive and transitive relation 
such that, for all ,^, 77, (^ G A and tt,w Gil, we have: 

I -k^ .IT y S.^TT. 

K -k ^ .f] .IT y ^•vr. 
E -k^ .7] .IT >- (^)r/ • vr. 
W -k^ .Tj .IT >- ^•r/.r/.TT. 
C-kS^.rj.(.TTyS,-k(:^.ri.TT. 
B-k^.ij.C.ny (e)(r/)C*vr. 
CC*.^ . vr ^ ,f •kjr . vr. 
k^r *^ . tu >- ^* vr. 
<;-*^.vr^^*n^.vr. 

X-kS^.TT'^y^-kT.TT. 
X'*S,.T.TTy^i<TT'^. 

Finally, we have a subset X of A •11 which is a final segment for this preorder, which means 

that: p G i, p' ^ p ^ p' € X. 

In other words, we ask that X has the following properties: 

{S,)ri •vr^X^,^*?7.vr^X. 
/•^.vr ^ X^^*vr ^ X. 

K-k^.ri.TT^±^S,*TT<^±. 

Eir^ .7] .7T ^ ± ^ {S,)ri • vr ^ X. 

W^^.rj.TT^JL^^-krj.rj.TT^jL. 

C-k^.ri.C.-iT<^±^S,*C.ri.TT^±. 

Bi<C.r].C.TT ^±^{C) (r/)C • ^ ^ X. 

CC*.^.vr^X^^*k7r.vr^X. 

k7r*^.c[7^X^,f*vr^X. 

?*^.vr^X^^*n^.vr^X. 

X*'?.vr''^X^,^*T.vr^X. 

X'-k^.T.TT^±^S,*TT'^^±. 

Remark. Thus, the only arbitrary elements in a standard realizability algebra are the set Ho of 
stack constants and the set X of processes. 

The axiom of choice for individuals (ACI). Let .A be a standard realizability algebra 
and A4 a ^-model, the set of individuals of which is denoted as P. Then, we have: 

Theorem 2.1 (ACI). For each closed formula \/xi . . .yx„i\/y F with parameters, there 
exists a function f : P™+1 -^ P such that: 

i) <j If Vxi ...Vxm(Vx(eni(x) -^ F[f{xi,... ,Xm,x)/y]) -> VyF). 
ii) ? If Vxi...Vxm(Va;(mi(x) -^ F[f{xi,...,Xm,x)/y]) -> VyF). 

Proof. For pi, . . . ,Pm, A; € P, we define f{pi, ■ ■ ■ ,Pm, k) in an arbitrary way if A; ^ N. 
If A; G N, we have k = Htt;, for one and only one stack vr/j € H. 

We define the function f{pi, . . . ,Pm, k) by means of the axiom of choice, in such a way that, 
if there exists q £ P such that: 

VTfc G \\F[pi,...,pm,q]\\, then we have vr^ G \\F\pi, . . . ,pm, fipi, ■ ■ ■ ,Pm,k)]\\. 
i) We must show ? |f Vx(ent(x) -^ F[pi, . . . ,p^, f{pi, . . . ,p^,x)]) -^ F[pi, . . . ,Pm,q], for 
every pi,...,pm,q G P. 
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Thus, let ^ \\-yx{ent{x) -^ F[pi, . . . ,pn, f{pi, . . . ,Pn,x)]) and vr G \\F\pi,. . . ,Pm,q]\\ ; we 

must show <; -k^ .TT G X, that is .^ * n^ . tt G X. But we have: 

C |]-ent(n7r) -> F\pi, . . . ,Pm,f{pi, ■ ■ ■ ,Pm, r\7r)] by hypothesis on ^ ; 

n^ G |ent(n,r)| by definition of ent ; 

vr G \\F[pi, . . . ,pm, fipi, ■ ■ ■ ,Pm, n,r)]|| by hypothesis on vr and by definition of /. 

ii) The proof is the same ; in fact, (ii) is weaker than (i) since | ent(x)| C | int(x)|. □ 

Remarks. 

1 . A seemingly simpler formulation of this axiom of choice is the existence of a function 

^.pm^p g^pj^ ^-^^^ Y^^ _ . .Va;,„(i^[0(xi, . . .,x^)/y] -> VyF). 

This clearly follows from theorem 12.11 simply define (f)(xi, . . . ,Xm) as f{xi, . . . ,Xm,x) for the first 

integer x such that -iF[f{xi, . . . , Xm, x)/y] if there is such an integer ; otherwise, 0(a;i, . . . , Xm) is 

arbitrary. 

But this function cj) is not a function symbol, i.e. it cannot be defined in the ground model. For 

this reason, we prefer to use this axiom in the form stated in theorem 12.11 which is, after all, much 

simpler. 

2 .The axiom of dependent choice DC is a trivial consequence of ACI ; therefore theorem 12. II shows 

that DC is realized by a proof-like term. Theorem 12.11 is also crucial to prove theorem 14.41 (see 

lemma 14. 6|) . 

3. In the following, there will be individuals which represent sets of integers (proposition 15. 1|) . but 

extensionality is not realized. That is why ACI is much weaker than the usual axiom of choice. For 

instance, it does not imply well-ordering. 

Generic models. Given a standard realizability algebra A and a ^-model Ai, we now 

build a new realizability algebra B and a ;B- model M, which is called generic over M. Then, 

we shall define the notion of forcing, which is a syntactic transformation on formulas ; it is 

the essential tool in order to compute truth values in the generic model N . 

Thus, we consider a standard realizability algebra A and a ^- model Al, the set of individuals 

of which is P. 

We have a unary predicate C : P ^ ^(■^)) a binary function a : P'^ ^ P and a distinguished 

individual 1 G P. We suppose that the data {C,a,1} constitute what we call a forcing 

structure in M, which means that we have the following property: 

There exist six proof-like terms ao,ai,a2, l^o, (3i, 132 such that: 

r G |C[(pAg)Ar]| => aoT G |C[pA(gAr)]| ; 

r G \C[p]\ => aiT G |C[pAl]| 

r G |C[pA(7]| => a2T G \C[q]\ 

r G IC[p]| ^ /3or G \C[pAp]\ 

T G \C\pAq]\ =^ Pit G |C[q'Ap]| ; 

r G |C[((pAg)Ar)As][ => /32T G |C[(pA(gAr))As]|. 

We shall call C-expression any finite sequence of symbols of the form 7 = {5o){5i) . . . {6k) 

where each 5i is one of the proof-like terms ao,ai,a2, Po, f3i, (32- 

Such an expression is not a C-term, but ^t is, for every C-term r ; 

the term 7r = ((5o)((^i) • • • {6k)T will also be written (7)r. 

Notation. A A-term is, by definition, a term which is written with the variables pi, . . . ,pk, 

the constant 1 and the binary function symbol a. Let t{pi, . . . ,pk),u{pi, . . . ,pk) be two a- 

terms. The notation: 
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7 :: t{pi,...,pk) =f-u{pi,...,pk) 
means that 7 is a C-expression such that r G |C[t(pi, . . . ,Pk)]\ => (7)7" £ \C[u{pi, . . . ,Pk)]\- 
Thus, with this notation, the above hypothesis can be written as follows: 
oq :: {phq)/\r =^ ph{q/\r) ; ai :: p ^ pAl ; 02 :: pf\q =^ q ; 
/3o " P =^ pf\p ; Pi '■'■ P^Q =^ q^P ; 1^2 '■'■ {{pAq)Ar)AS =^ {pA{qAr))AS. 

Lemma 2.2. There exist C- expressions /3q,/3[,/32,/33,/33 suc/i i/iai; 

/3o :: pAq => {pAq)Aq ; P[ :: {pAq)Ar => {qAp)Ar ; 13'^ :: pA{qAr) => {pAq)Ar ; 

/33 :: pA{qAr) =^ pA{rAq) ; (3'^ :: {pA{qAr))AS => {pA{rAq))AS. 

Proof. We write the sequence of transformations, with the C-expressions which perform 
them: 

. /3^ = (/3i)(a2)(ao)(/3o). 

pAg; /3o ; {pAq)A{pAq) ; oq ]pA{qA{pAq)) ; 02 ;qA{pAq) ; /3i ; {pAq)Aq. 

. /3^ = (/3i)(ao)(/3i)(ao)(/3i). 

pA{qAr) ;/?! ; {qAr)Ap ; ao ; qA{rAp) ; /3i ; {rAp)Aq ; ao ; rA{pAq) ; /3i ; {pAq)Ar. 

. /3; = (a2)(«o)(/32)(/3i)(ao)(a2)(/3i)(/3^)(/3^)(/3i). 

(pAg)Ar ; /3i ; rA(pAg) ; /3o (rA(pAg))A(pAg) ; /3^ ; ((rA(pAg))Ap)Ag ; /3i ; qA{{rA{pAq))Ap) ; 
02 ; {rA{pAq))Ap ; oq ; rA{{pAq)Ap) ;/3i ; {{pAq)Ap)Ar ; /32 ; {pA{qAp))Ar ; oq ; 
pA{{qAp)Ar) ; 02 ; {qAp)Ar. 

•/33 = (/3i)(/3i)(/3i)- 

pA{qAr) ; /3i ; (gAr)Ap ; /J^ ; (rAg)Ap ; /3i ; pA{rAq). 

• /3^ = (/31)(/3^)(/31)(ao)(/31). 

(pA(gAr))AS ; /?[ ; ((gAr)Ap)AS ; oq ; (gAr)A(pAs) ; j5[ ; (rAg)A(pAs) ; /3^ ; {{rAq)Ap)As ; 

^1 ; {pA{rAq))AS. D 

Lemma 2.3. iyci t he a A-term and p a variable of t. Then, there exists a C-expression 
7 such that 'J :: t ^ tAp. 

Proof. By induction on the number of symbols of t which stand after the last occurrence of 

p. If this number is 0, then t = p or t = uAp. Then, we have 7 = /3o or /3q (lemma [2.2p . 

Otherwise, we have t = uav ; if the last occurrence of p is in u, the recurrence hypothesis 

gives 7' :: vau =^ {vau)ap. Then, we have 7 = (/3i)(7')(/3i)- 

If the last occurrence of p is in v, we have v = t'oAVi. If this occurrence is in vq, the 

recurrence hypothesis gives 7' :: ua{viavq) => {ua{viavo))ap. We put 7 = i/3'^){'~f'){(33) 

(lemma [121). 

If this occurrence is in vi, the recurrence hypothesis gives 

7' :: {uavq)avi =^ {{uavq)avi)ap. Then, we put 7 = (/32)(7')(/52)- D 

Lemma 2.4. Let t,u be two A-terms such that each variable of u appears in t. Then, there 
exists a C-expression 7 such that 7 :: t => tAU. 

Proof by recurrence on the length of u. 

If n = 1, then 7 = ai ; if « is a variable, we apply lemma [231 

If u = VAW, the recurrence hypothesis gives 7' :: t => tAV and also 7" :: tAV =^ {tAv)AW. 

Then, we put 7 = (ao)(7")(7')- D 

Theorem 2.5. Let t,u be two A-terms such that each variable of u appears in t. Then, 
there exists a C-expression 7 such that j :: t ^ u. 

Proof. By lemma [2l^ we have 7' :: t => tAU. Thus, we can put 7 = (a2)(7')- D 
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Corollary 2.6. There exist C-expressions 'Ji, jk,^e, iWi^c, IB, JccJk such that: 

7/ :: pAq =^ q ; jk '■'■ 'i-A{pA{qAr)) => pAr ; je '■'■ lA(pA(gAr)) => {pAq)Ar ; 

7iy :: lA(pA(gAr)) =^ pA{qA{qAr)) ; jc '■'■ lA{pA{qA{rAs))) =^ pA{rA{qAs)) ; 

'jB ■■■■ lA{pA{qA{rAs))) =^ {pA{qAr))AS ; 7cc :: lA(pAg) =^ pA{qAq) ; 

7k :: pA{qAr) =^ qAp. D 

The algebra B. We define now a new realizability algebra B = (A, 11, A * 11, JL): its 
set of terms is A = A x P, its set of stacks is 11 = 11 x P and its set of processes is 
A*n = (A*n)xP. 
The distinguished subset Xg of A * 11 is denoted by JL. It is defined as follows: 

(^*7r,p)€JL ^ (Vr GC[p])C*vr^ ex. 

For {Cp) € A and {7r,q) G 11, we put: 

{^,p)-k{Tr,q) = {i-k-K,pAq) ; 

(?,p)-(7r,g) = {^.TT,pAq). 

For (^,p), (r/,g) G A, we put: 

{^,p){v,(l) = {ao^V,P^Q) with So = Ax(x)A2/(x'x)(ao)y. 

Lemma 2.7. For each C - expression ^, we put 7 = Ax(x)Ay(x'a:)(7)y. 
Then, we have ^ -k ^ . ir'^ y $^ -k vr'^'^ . 

Proof. This is immediate, by means of theorem ll.2[ 

We could take also 7 = (x)AxAy(x'y)(7)a;. D 

Proposition 2.8. // we have 7 :: t{pi, . . . ,pk) =^ u{pi, . . . ,Pk), then: 
{j-k^ .Tr,t{pi,...,pk)) >- (C*7r,n(pi,...,pfe)). 

Proof. Suppose that (7 • .^ . vr, t(pi, . . . ,Pk)) ^ A- Thus, there exists r G C[t{pi, . . . ,Pk)] 
such that: 

7 • ^ . vr"^ ^ X. Therefore, we have S, * tt"''^ ^ X et 7r G C[u{pi, . . . ,Pk)]- It follows that: 
(^•7r,u(pi,...,pfe)) ^ X. D 

Lemma 2.9. We have (.^,p)(??, g) * (7r,r) ^ X =^ (^,p) * (r/, (7) . (7r,r) ^ X. 

Proof. By hypothesis, we have (ao^ij-kn, {pAq)Ar) ^ X ; thus, there exists r G C[{pAq)Ar] 
such that aoCiJkn'^ ^ X. By lemma [277| we have C*V • 71""°^ ^ X ; since aoT G C[pA{qAr)], 
we have (^ *7/ . 7r,pA(gAr)) ^ X and thus {^,p) -k (r],q) . {TT,r) ^ JL. D 

We define the elementary combinators B, C, E, I, K, W, CC of the algebra B by putting: 

B = (P*, 1) ; C = (C*, 1) ; E = {E\ 1) ; I = (/*, 1) ; K = {K*, 1)-W = {W\1)- 
CC = (cc*,l) 

with B* = XxXyXz(jB){aox)(ao)yz ; C* = "JcC ; E* = AxAy(7^)(ao)xy ; I* = jjl ; 
K*=-fKK ; W*=-fwW ; CC* = {x)XxXy{cc)Xki{x'y){lcc)x){x)XxXy{k){x'y){^w)x. 
We put k(^^p) = (k;,p) with k; = {x)XxXy{K){x'y)hk)x. 

Theorem 2.10. For every ^,7/,C G A and 7f,ro G 11, we have: 

Iki.TT (^ JL => |*^^X; 
K*|.7?.^^X ^ ikTT^JL; 
E*|.f?.f^^X ^ (|)??*^^X; 
W^l^.r/.fr^X ^ ^*r) . ?7 . vf ^ X. 



REALIZABILITY ALGEBRAS: A PROGRAM TO WELL ORDER R 17 



Proof. We shall prove only the cases W, B, k^j, CC. 

We put 1= (^,p),r? = {rj,q),C = {(,r),Tt = {tt,s),w = {w,q). 

Suppose W -k^^ .fj . TT ^ JL, and therefore (7pi/W^ -k ^ .rj .it, 1a(pa((7as))) ^ J_. 
Thus, there exists r € C[1a(pa((7as))] such that ^^W • ^ . ry . vr"^ ^ X. 
Since ^]yW k ^ .7] .tt'^ ^^•ry.ry. vr'''^'^, we have ^kr] .r] . tt''^'^ ^ i. 
But 714/7" G C[pa((7a((7as))] and it follows that ^-kfj .fj .tt ^ JL. 

Suppose B*|.ry.C.7f^J_, that is {B* • ^ . t/ . (" • vr, lA(pA(gA(rAs)))) ^ J_. 

Thus, there exists r G C[lA(pA((7A(rAs)))] such that B* -k^ .rj . ( .tt'^ ^ X. 

But, we have B* -k (, . rj . ( . ir'^ >- (tb) (ao^) (ao)r/^ k vr"^ (by theorem ll.2p 

>- (ao^){ao)r]C -*^ '^'^^^ (by lemma [221) • Therefore, we have {ao^){ao)r]( k tt'^b'^ ^ X. 

But jbt S C[(pA((7Ar))As] and thus, we have: 

{{ao^){ao)r]( -k TT , {pA{qAr))As) ^ X, in other words {S,){f])C*^ ^ A- 

Suppose k^*^.ti7^X, that is (k* *^ . tu, sA(pAg)) ^ X. 

Thus, there exists r G C[sA(pAg)] such that k* *^ . zu'^ ^ X. But we have: 

klkr^.uj'^ y XxXy{K){x'y)i7k)x-kT.S,.w y {K)ix'C)ilk)r-kw (by theorem Ol) 

>- (x'0(7k)T*7r^x'*C-7kT.vr y^krir'^^'^. 

Thus, we have ^•vr''''*'^ ^ X ; but, since 'j^t G C[pAs], we get ^-kii ^ X. 

Suppose CC*|.7f^X, that is (CC* *^ . vr, Ia(pas)) ^ X. 

Thus, there exists r G C[1a(]5as)] such that CC* •^ . vr"^ ^ X. But we have: 

CC**^.7r^ ^ AxAy(cc)A/c((x'2/)(7cc)a;)(x)AxAy(A:)(x'y)(7k)x*T.C.7r 

>-(cc)A/c((x'e)(7cc)T)(x)AxAy(A;)(x'y)(7k)a:*vr 

>- ((x'0(7cc)'r)(x)Aa;Ay(k^)(x'y)(7k)a;*7r ^x'*?-7cc'r.(x)Aa;Ay(k„)(x'y)(7k)a;.vr 

>- e * (x)AxAy(k^)(x'y)(7k)x . ttT-^ = ? * k; . vr^"-. 

It follows that ^ i*r k* . tt'^""'^ ^ X. But we have 7ccT G C[pa(sas)] and it follows that we 

have (^,p)*(k*,s) . (7r,s) ^ X, that is |*k^.7f^X. D 

We have now completely defined the realizability algebra B. 

For each closed C-term t (proof- like term), let us denote by ts its value in the algebra B 
(its value in the standard algebra ^ is t itself). Thus, we have t^ = (t*, 1^), where t* is a 
proof-like term and If a condition written with 1, a and parentheses, which are obtained 
as follows, by recurrence on t: 

• If i is an elementary combinator B,C,E, I, K, W, cc, then t* is already defined ; It = 1. 

• (tu)* = aot*u* ; Itu = liAl„. 

The model Af. The i3-model M has the same set P of individuals and the same functions 

as M. 

By definition, the fe-ary predicates of TV are the applications from P into 7^(11). But, since 

n = IIxP, they are the same as the applications from p'^+i into V(n), i.e. the k + 1-ary 

predicates of the model Ai. 

Each predicate constant R, of arity k, is interpreted, in the model A4, by an application 
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Rm from P into V{A). In the model TV, this predicate constant is interpreted by the 
apphcation Raa : -P'' ^ 7^(A), where R^f{pl, . . . ,pk) = RMiPi, ■ ■ ■ ,Pk)'x{'i-}- 
For each closed formula F, with parameters in Af, its truth value, which is a subset of 11, 
will be denoted by ||!-F|||. We shall write {^,p) \^ F to mean that {(,,p) E A realizes F, in 
other words (Vvr G U){\/q G P)(((7r,g) G |||F|||) => {C,p) * (vr,?) G JL). 

Theorem 2.11. 

// we have \- t : A in classical second order logic, where A is a closed formula, then 
tB = {t*,lt) \hA. 

Proof. Immediate application of theorem 11.31 (adequacy lemma) in the ,B-model Af. □ 

Proposition 2.12. 

i) // (^, 1) ||- F, then {^(,,p) ||- F for each p G P, with 7 :: pAq =^ lAg. 
ii) Let ^, 7/ G A be such that ^-kir >- rj-kn for each vr G 11. Then, we have: 
(.^ * TT, p) ^ JL =^ {r]-kTr,p) ^ JL for every vr G II and p ^ P ; 
iv^P) \fr -^ ^ ('?iP) \^ F for every closed formula F . 

Proof. 

i) We must show that, for each (vr, q) G |||-F|||, we have {jC,p) * (vr, q) G JL, that is: 
{^^•kTr,pAq) G JL. Thus, let r G C[pAq], so that 7T G C[lAg]. 

Since we have, by hypothesis, (^*vr, lAg) G JL, it follows that ^ * vr'>"^ G X and therefore 
7^*vr^ G X. 

ii) By hypothesis, there exists r G C[p] such that ,^*vr'^ ^ X. Thus, we have r/^vr"^ ^ X, 
so that (r/*vr,p)^X. 

Let (vr,(7) G |||-F||| ; we have (??,p) * (vr, g) G X, that is (r/*vr,pAg) G X. From what we have 
just shown, it follows that (^*vr,pAg) G X, and therefore (^,p) •(vr,*/) G X. D 

The integers of the model J\f. Recall that we have put: 
a = XnXfXx{f){n)fx, = XxXyy and n = ((t)"0 for every integer n. 
Thus, we have a^ = {cf*, lo-) and ng = (((j)"'0)b = (n*, 1„). 
Therefore Og = {KI)b = {K* , 1)(/*, 1) and n + l ^ = aBm = {a*, la){n*, 1^). 
Thus, the recursive definitions of n*, 1„ are the following: 
0* = aoK*r ; ( n + 1 )* = aoa*n* ; 
lo = 1a1 ; I n+i = Io-aI^. 

We can define the unary predicate ent(x) in the model Af in two distinct ways: 
i) From the predicate ent(x) of the model AA, by putting: 
|ent(s"0)| = {(n,l)} ; |ent(p)| = if p ^ N. 

ii) By using directly the definition of ent(x) in the model Af ; we denote this predicate by 
ent_Y(x). Therefore, we have: 
\ent^{s''0)\ = {n^} ; \ent^{p)\ = if p ^ N. 

From theorem 11.131 applied in the model Af, we know that the predicates int(x) and 
ent_;\^(x) are interchangeable. Theorem 12. 131 shows that the predicates int(x) and ent(x) are 
also interchangeable. Thus, we have three predicates which define the integers in the model 
A/" ; it is the predicate ent(x) that we shall mostly use in the sequel. In particular, we shall 
often replace the quantifier Vx^^* with Vx^'^*. 
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Theorem 2.13. 

There exist two proof-like terms T, J such that: 
i) (T, 1) 1^ VXVx((eni(x) -^ X), int{x) -^ X). 
ii) ( J, 1) II]- Vx(eni(x) -^int{x)). 

Proof. 

i) We apply theorem 11.121 to the sequence n : N ^ A defined by u„ = (n, 1). 
We are looking for two proof- like terms T, S such that: 

(S, 1) * {^,p) . (n, 1) . (^, r) ^ (V,p) * (n + 1, 1) . (^, r) ; (5, 1) ||f T ^ 1, T ^ ±. 
(T, 1) * (,^,p) . {u, q) . (vr, r) ^ (i., g) • (5, 1) . ((/),p) . (0, 1) . (vr, r). 

Then theorem 11.121 will give the desired result: 

(T, 1) llf VXVx((ent(x) ^ X), int(x) ^ X). 

We put S = A/Ax(7/)((t)x, with 7 :: lA(pA(gAr)) ^ pA{qAr). 

Then, we have (5, 1) * {tp,p) . {u, q) . {7r,r) = {S -kip . u .tt, lA{pA{qAr))) >~ 

(jyijj -k au .TT, lA{pA{qAr))) (theorem 11.21 and proposition I2.12l fii)) 

y [ifj-k (jv . ■7T,pA{qAr)) (proposition 12. 8p = {ip,p) * {(^i^,q) • (7r,r). 

Suppose first that {ip,p) ||]- T — > ± ; then, we have {ip,p) * (au, q) . (vr, r) G JL and thus: 

(S',l)*(V',p).(i^,g).(vr,r) G JL. This shows that {S,l) ||]-T^_L,T^±. 

Moreover, if we put v = n, so that au = n + 1 , and q = 1, we have shown that: 

{S, 1) -k {^,p) . (n, 1) . (it, r) y {^,p) -k ( n + 1 , 1) . {n, r). 

Now, we put T = XfXx(^'x)SfO, with 7' :: lA(pA(gAr))] =^ gA(lA(j)A(lAr))). 

Then, we have (T, 1) * (<?!), p) • ii^,q) . {tt ,r) = (T k cj) . u . n , lA{pA{qAr))) >- 

{^'v k S . (j) .O.TT, lA{pA{qAr))) (theorem 11.21 and proposition 12. 12^ 11) ) 

>- (i^* 5 . (/> . . vr, (7A(lA(pA(lAr)))) (proposition 12.80 

= {u, q) k [S, 1) . (0,p) . (0, 1) • (vr, r) which is the desired result. 

ii) We are looking for a proof-like term J such that ( J, 1) ||]- Vx(ent(x) ^'int(x)). It is 

sufficient to have (J, 1) |[|- ent(s"'0) ^int(s"0) for each n € N, since | ent(p)| = if p ^ N. 

Let (vr, q) £ |||int(n)||| ; we must have (J, 1) k (n, 1) . (vr, q) G JL, that is: 

(J*n.7r, Ia(Iaq')) G J_. 

But, we have (n*,ln) = ((o")"0)b ||]-int(s"0) (theorem 11.31 applied in B) and therefore: 

(n*, In) * (vr, (?) € JL or else (n* k vr, l„Ag) G JL. 

Thus, let r G C[1a(1a(7)] ; we have then (7)"(7o)t G C[lnAg] 

where 70 and 7 are two C-expressions such that: 

70 :: lA(lAg) =^ (lAl)Ag ; 7 :: pAq =^ (l^Ap)Ag. 

Indeed, we have seen that Iq = 1a1 and l„+i = 1o-a1„. It follows that, if r G C[1a(1a(7)], 

then (7o)t G C[1oA(7], and therefore (7)"(7o)''" £ C[1„a(7]. 

Thus, we have n* *7rW"(^o)T ^ j__ 

Now, we build below two proof-like terms g,j such that, for each n G N, we have: 

a) gkn.^.TT^ ^^•vr^^'^o)^ ; 

h)jkn.^.7ry^kn*.Tr. 

Then, by putting J = Xx{gx){j)x, we have J* n . vr'^ y n* -k ti(^> y'yo)T g x, which is the 

desired result. 

a) We put g = AA;Ax(7o)(fc)7x ; from theorem 11.21 we have: 

gkn.^.TT'^ ^ 7o * (11)7^ • vr^ >- {nyyi k 11^'^°^'^ . 

Thus, it suffices to show that (n)7^ * tt"^ ^ '^ * vr^'*')"'^ which we do by recurrence on n. 

If n = 0, we have immediately 0*7. ^.tt"^ >- £,kT['^ since = Ax Ay y. 
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Going from n to n + 1: we have ( n + 1 )7^ • vr"^ = (crn)^^ •vr'^ y a -kn.^ . (, .n'^ 

^ 7 * {11)1^ • ^^ ^ {]l)l^ * vr^'^-''^ ^ '^ * vr^'''-'" "^ by induction hypothesis. 

b) We put P = aoa*,U = XgXy{g){f3)y and j = XkXf{k)UfO*. 

Therefore, we have j *21 • '^ • vr ^ nC/^ • 0* . vr. We show, by recurrence on n, that: 

nt/,^ • A;* . vr ;^ ,^ • ( n + fc )* . vr for each integer /c, which gives the desired result with A; = 0. 

For n = 0, we have 0^7.^ -kk* .tt >- ^-kk* .it since = XxXy y. 

Going from n to n + 1: we have ( ra + 1 )^?7 . ^ . fc* . vr = an-kU . ^ . fc* . vr >- U -knU^ . k* . it 

(since a = XnXfXx{f){n)fx) >- nU(, krjsk* .tt = nUS, • ( A: + 1 )* . tt >- ^ • ( n + fc + 1 )* . vr 

by induction hypothesis. D 

3. Forcing 

Forcing is a method to compute truth values of formulas in the generic ;B-model M. 

For each /c-ary predicate variable X, we add to the language a new predicate variable, 

denoted by X'^, which has arity k + 1. In the ^- model A4, we use the variables X and 

X^ ; in the ;B- model Af, only the variables X. 

With each fe-ary second order parameter A' : P — ?• 'P(n) of the model M, we associate a 

(/c + l)-ary second order parameter X^ : P^^^ -^ ^(n) of the model A4. It is defined in 

an obvious way, since 11 = IIx P ; we put: 

X+{p,pi, . . . ,pfc) = {tt G 11; {tt,p) £ X{pi, . . . ,pk)}. 

For each formula F written without the variables X+, with parameters in the model TV, 

we define, by recurrence on F, a formula denoted by p |- F (read " p forces -F "), with 

parameters in the model A, written with the variables X^ and a free condition variable p: 

If F is atomic of the form X{ti, . . . , tfc), then p [- F is \/q{C[pAq] -^ X^{q,ti, . . . ,tfc)). 

If F is atomic of the form X{ti, . . . , t^), then p j- F is yq{C\pAq] -^ X^{q,ti, . . . , tfc)). 

li F = (A ^ B) where A, B are formulas, then p J- F is Vg(g j- A — ?• pAq |- B). 

If F = (R(ii, . . . ,tk) —?■ B), where R is a predicate constant, then: 

p^F is {R{ti,...,tk)^plB). 

If F = (ti = t2 ^ B), then p }- F is {ti = t2 ^ p h B). 

liF = \lxA, then p |- F is \/x{p^A). 

IfF = VXA, then p ^ F is \JX+{p^A). 

Thus we have, in particular: 

IfF = Vx^°*^, then p ^ F is Vx^"^(p^^). 

Lemma 3.1. Let F be a formula the free variables of which are amongst Xi, . . . , X^ and let 
Xi, . . . ,Xj. be second order parameters in the model J\f, with corresponding arities. Then, 
we have: {p ^ F)[X+/X+, ..., X+/X+] = {p ^ F[X^/X^, . . . , Xk/X^]). 

Proof. Immediate, by recurrence on F. □ 

Theorem 3.2. 

For each closed formula F with parameters in the model M , there exist two proof-like terms 
XFi'x'f' which only depend on the propositional structure of F, such that we have: 

el^(pFF) ^ ixF^p) IFF; 
(^,p) I^F ^ ^'^^[^(p^F) 
for every ^ € A and p (z P. 
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The propositional structure of F is the simple type built with only one atom O and the 
connective —^, which is obtained from F by deleting all quantifiers, all symbols i-^ with 
their hypothesis, and by identifying all atomic formulas with O. 
For instance, the propositional structure of the formula: 

yX{yx{yy{f{x,y) = 0^ Xy)^Xx)^yxXx) is {0^0)^0. 

Proof. By recurrence on the length of F. 

• If F is atomic, we have F = X{ti, . . . ,tk) ; we show that xf = X and x'f — x'- 
Indeed, we have: \\p [- F\\ = \\\/q{C[pAq] — > X~^{q,ti, . . . ,tfc)|| 

= UU-^; T(£C[pAq],{7T,q) G |||-^(ti, . . . , tfc) |lj}, 
because, by definition of X^ , we have vr G ||A'+(g, ti, . . . , tk)\\ <^ (vr, q) G |||'^(ii, • • • , ^fc)|||- 
Therefore, we have: 
(*) ChiphF) ^ 

{yq e P){yT eC[pAq]){W eU){{7T,q) e \\\X{ti,. . . ,tk)\\\ ^ ^*T .TT e ±). 

Moreover, we have (^,p) \\\- F ^ (Vg G P){\/tt G n)((7r,g) G |||F||| => (^,p) • (7r,g) G JL) 

^ (Vg G P)(V7r G n)((7r,g) G |||F||| => (^•vr,pAg) G JL) and finally, by definition of JL: 

(**) {C,P)\hF ^ (VgGP)(Vr GC[pAg])(V7r Gn)((7r,g) G |||F||| ^^*^^ GX). 

Suppose that ^ |]- (p j- F). Since xC * '''"^ ^ ^ * ''" • "^j we have from (*): 

(Vg G P)(Vr G C[pAg])(V7r G n)((7r, g) G \\\X{ti, . . . ,tk)\\\ ^ xC*r .tt € ±) 

and therefore (xC;P) \\\~ ^ from (**). 

Conversely, suppose that (^,p) \^ F. By applying (**) and x'^*r .vr ^ C*'^^; we obtain 

(VgGP)(Vr GC[pAg])(V7r Gn)((7r,g) G |||F||| ^x'C*r.7r GX) 

and therefore x'^ \\~ {P \~ F) from (*). 

• UF = yXA, then p I F = yX+{p ^ A). 
Therefore, we have ^ f {P h F) = VX+(^ |^ (p ^ ^)). 
Moreover, we have (C,p) ||]- F = VX((^,p) ||]-^). 

Let X : P — 7> 'P(n) be a second order parameter in the model J\f, with the same arity as 

X, and let X^ be the corresponding parameter of the model M. 

If Chip h F), then we have (^ |^ {p ^ A))[A'+/X+], thus ^ |^ (p |- A[X/X]), from 

lemma 13.11 

By the recurrence hypothesis, we have {xaS,,p) \\\- A[X /X]. Since X is arbitrary, it follows 

that ixAi.p) llfVX^. 

Conversely, if we have (^,p) ||]--P, then {i,p) \\\- A[X / X] for every X. 

By the recurrence hypothesis, we have x'a^ li~ iP \~ ■^['^ 1-^])^ ^^"^ therefore: 

Xa^ |]- (p J- yl)[A'+/X+]), from lemma IXTl Since <Y^ is arbitrary, it follows that: 

x'aC h^X+{p ^ A), that is x'aC If {P F VX A). 

• If F = Vx A, then p\-F = \lx{p \- A). Therefore ^ hph F = Vx(^ [f {p \- A)). 
Moreover, (^,p) ||f F ee Vx((^,p) ||]-A). 

The result is immediate, from the recurrence hypothesis. 

• li F = {ti=t2^ A), then p^ F = ti = t2^ p^ A. Therefore: 
ih{phF) = {t^=t2^ih{phA)). 

Moreover, {i,p) \\r F = (ti = tg ^ {i,p) \h A). 

The result is immediate, from the recurrence hypothesis. 

• li F = A ^>- B,we have p\- F = \tq{q \- A ^ pAq [- B) and therefore: 
(*) e If (P h i") ^ V7/V^(7? If (g f ^) ^ ^T] hJpAq f B)). 
Suppose that C If (p f F) and put xf = >^xXy{-fQ){xB)ix){x'A)y- 
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We must show {xfC,p) ||]-^ — ^ -B ; thus, let {7],q) \^ A and (vr,r) G |||-B|||. 

We must show (xfCp) * {i]^q) • i'^^''") ^ -^ that is (xf^ *?? • ''r,pA(gAr)) € JL. 

Thus, let T G C[pA(gAr)] ; we must show xfC * r/ . vr"^ G i or else XF * ^ • ?? • tt"^ G X. 

From the recurrence hypothesis applied to (r/, q) ||]- A, we have x'a^ \\~ {q h A). 

From (*), we have therefore (O(Xyi)^ 11" (P^l h ^)- 

Applying again the recurrence hypothesis, we get: 

{{XB){Oix'A)^,PM) \hB. But since (7r,r) G |||5|||, we have: 

{{XB){0{x'AHP^q)*iT^,r)eJL, that is {{xB){^){x'A)v*T^,{P^q)^r) £ JL. 

Since r G C[pA(gAr)], we have 70T G C[(pAg)Ar] and therefore (xs)(0(Xa)^*'^'^°^ ^ -IL- 

But, by definition of xf, we have, from theorem 11.21 

Xf * C • ?? • 71"^ >- {xb){0{x'a)^ * ''^'^^'^ which gives the desired result: xf * ^ . ?? . vr"^ G i. 

Suppose now that {6.,p) \\\- A ^- B ; we put x'f — '^2;A7/(x's)(aoa^)(XA)y- 

We must show x'fC h {p h ^ ^ B) that is yqixpC h {q h ^ ^ P^Q h B)). 

Thus, let r/ |]- g [- ^ and vr G \\pAq j- B\\ ; we must show x'f^ * r/ • vr G X. 

By the recurrence hypothesis, we have {xAV^ q) II]~ ^; therefore (C;P)(XA^5 Q') ||]- -B or else, 

by definition of the algebra B: ((aoO(XA)??,PAg) ||]- -B. 

Applying again the recurrence hypothesis, we have (Xs)("oC)(xa)^ |]- (pAg |- B) and 

therefore: 

(XB)(«oO(XA)??*vr G X. But we have: 

x'f^ * 7/ . tt ^ Xf * C -11 '"^ ^ (Xb)(c^oO(xa)?? * tt from theorem 11.21 ; the desired result 

follows. n 

A formula F is said to be first order if it is obtained by the following rules: 

• ± is first order. 

• li A,B are first order, then ^ ^- i? is first order. 

• If S is first order, R is a predicate symbol and ti, . . . , t^ are terms with parameters, then 
R(ti, . . . ,tk) ^f B , ti = t2 ^^ B are first order. 

• If A is first order, then \/x A is first order (x is an individual variable). 
Remarks. 

i) If A is a first order formula, it is the same for \/x A. 
ii) This notion will be extended below (see proposition 14. 3p . 

Theorem 3.3. Let F he a closed first order formula. There exist two proof-like terms 
6f,S'f, which depend only on the propositional structure of F, such that we have: 
^\^{C\p]^F) => {6fC,p) \hF ; 
itp) \hF ^ 5'pa^iC\p]^F) 
for every ^ G A and p £ P. 

Proof. The proof is by recurrence on the construction of F following the above rules. 

• If F is X, we put: 

5± = Ax(x)Ay(x)(a)y with a :: pAq => p . 

(5^ = \x\y{x' x){a')y with a' :: p => phi . 

Indeed, suppose that ^ |]-C[p] -^ X and let us show that ((5_Li^,p)(vr,g) G X, that is: 

{5±£,'k T:.,p/\q) G X. Thus, let r G C[pA(7], so that ar G C[p], so that .^ * ar . vr G X, by 

hypothesis on ^, which gives (5_L^*7r'^ G X. 

Conversely, if (C,p) ||]- X, we have (^,p) * (vr, 1) = (^ •7r,pAl) G X for every vr G II. 
But, if r G C[j?], we have qV G C[pa1], therefore .^ :*: vr"^ "^ G X, thus (5^^ • r . vr G X. 
Therefore (5', ^ |]- C[p] ^^ X. 
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• If F is A —> B, we put: 

6a^b = XxXy{x)Xz{ix')idB)Xd{ix)ia)z){5'^y)il3)z){j)z with 

a :: pA^qAr) => p; /? :: pA^qAr) =^ q ; 7 :: pA{qAr) =^ lAr. 

Indeed, suppose that ^ |]- C[p],yl ^ i?, (??,(?) ||]-^ and (7r,r) € |||i3|||. 

We must show {5a^bS,jP) * iVi l) • (^) ''') ^ -"L, that is ((5a-s>_bC * V • vr,pA(gAr)) G JL. 

Thus, let r G C[pA(gAr)] ; we must show Sa^bC^V • tt"^ G -U-- 

We have ar £ C[p],/3r € C[q] ; but, by the recurrence hypothesis, we have: 

6'^r] \^C[q]^A, therefore (<5;^7?)(/3)r \^ A and ((0(a)r)(<5»(/3)T |f B ; 

thus Ad((e)(a)T)(<5^r,)(/3)T |fC[l]^i?. 

From the recurrence hypothesis, we have {{6B)Xd{{S,){a)T){5'j^rj){(3)T, 1) ||]-i?, thus: 

((,5B)Ad((e)(a)r)(<5»(/3)r,l) •(7r,r) G A, that is: 

((5B)Ad((0(a)r)(5»(/3)r*7r,lAr) G JL. 

But, we have 7T G C[lAr], therefore ((5B)A(i((.^)(Q)r)((5^77)(/3)r ^vr'^'^ G X, and thus: 

((x')('JB)A(i((0(a)T)((5A^)(/5)T)(7)r*7r G X. It follows that: 

(x)Az((x')('5B)Ad((0(a)^)('5»(/3)^)(7)2*vr- G X so that 6a^b^*Vt^" e i- 

We now put: 

S'a^b ~ XxXyXz{{5'Q){7x()x){6A)Xd z){a)y with a :: p => pAl. 

Suppose that (^,p) ||]- A ^ i? ; let r G C[p], r/ |^ A and vr G ||-B||. We must show: 

Sa->-b^ * r . r/ . tt G X. We have Xdr] |]- C[l] — )■ A ; applying the recurrence hypothesis, we 

have (((5A)A(ir/, 1) ||]-yl, thus {^,p){{6A)Xdr],l) \\\- B that is {{a^C){^A)Xdr],pAl) \\\- B. 

Applying again the recurrence hypothesis, we find: 

((5^)(aoO(<^A)Ad?7 |]-C[pa1] — > B. Since we have ar G C[pAl], we get: 

{6'^) (7x0$,) {5 a) Xdr]* ar .tt £ A. and finally (5^_^^^ • r . ?? . vr G X. 

• If F = R(^ -^ B, where R is a k-aiy predicate symbol and p G P^, we put: 
Sr^b = XxXy(a){5B)Xz{x)zy with a :: pA(lAr) =^ pAr. 

5'b-^b — Aa;AyAz((5^)(ao)a;-2)(a')y '^ith a' :: p ^ pAl. 

Suppose that ^ |]-C[p],R[g] — > i? and let 77 G |R[^|, (tt, r) G |||-B|||. We must show: 

((5ij^B^,p)*(r?, 1) . (7r,r) G X, that is (Jij^^^*?? . 7r,pA(lAr)) G X. 

Thus, let r G C[pA(lAr)] ; we must show 5r-^bC *r/ . tt^ G X. But, we have: 

Xz{^)zr] \\-C\p] — > B, and thus {{5B)Xz{^)zri,p) ||]-i?, by the recurrence hypothesis. 

It follows that {{6B)Xz{S,)zri,p) * (vr, r) G X, that is: 

{{5B)Xz{S,)zri -kTTjpAr) G X. But we have ar G C[j)Ar], and therefore: 

{dB)Xz{^)zri •kTT"''^ G X, thus {a){6B)Xz{^)zrj -kn'^ G X, therefore 6r^bC*V •'^^ ^ -"-• 

Suppose now that {6.,p) \\\- R(^ ^ B ; let r G C[p], rj G |R[9]| and vr G ||-B||. 

We must show S'b-^b^ :*r r . r/ . tt G X. But, we have {S,,p){ri, 1) ||]- B, that is: 

((ao)'^^,PAl) II]- -B, thus (5^)(ao)^^ |]~C|j»a1] — > 5, by recurrence hypothesis. 

But, we have a'r G C[pAl], therefore iS'B){'c^o)S,V * (^'t • tt G X, hence the result. 

• U F = (pi = p2 >-^ B), we put 6f = Sb and S'p = 5'^. 

Indeed, suppose that ^ |]-C[j)] -^ (pi = p2 ^^ B) and (7r,g) G |||pi = P2 ^^ -B|||. We 
must show that {6b^iP) * (tt, g) G X. Since |||pi = P2 '-^ B\\\ / 0, we have pi = p2, thus 
(tt, q) G |||-B||| and ^ |]- C[p] ^ i?. Hence the result, by the recurrence hypothesis. 
Suppose now that {(,,p) ||]-pi = P2 *-^ B, t \\-C[p] et vr G ||pi = P2 *-^ B\\. We must 
show 5'^ -k T . TT £ JL. Since ||pi = P2 ^ B\\ / 0, we have pi = P2, therefore vr G ||i?|| and 
(CjP) I|]~-S. Hence the result, by the recurrence hypothesis. 

• If F = Vx A, we put 6f = 6a and 6'p = 6'^. 
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Indeed, if S, \\- C[p] — ?• Vx A, we have S, \\- C[p] -^ A[a/x] for every a € P. By the recurrence 
hypothesis, we have {6a^,p) \h ^i'^/^] 5 ^^^s {5aCtP) ||]-Vxj4. 

If (C;P) l|]~^2:^, we have {^,p) \^A[a/x] for every a € P. By the recurrence hypothesis, 
we have 6'^^ \\- C[p] -^ A[a/x] ; thus 5'^^ ||- C[p] ^^xA. D 

The generic ideal. We define a unary predicate J : P ^ ^(n) in the model M (second 
order parameter of arity 1), by putting J{jp) = IIx {p} ; we call it the generic ideal. 
Thus, the binary predicate J^ : P^ — > Vijl) which corresponds to it in the model A^, is 
such that J^{j>^ 9) = (resp. 11) \ip ^ q (resp. p = q)- In other words: 

J^kP-, q) is the predicate p ^ q. 
The formula p |]- i7(g) is Vr(C[pAr] — t- J^{r.,q)). Therefore, we have: 
\\p |]-i7(9)!l = IHCIpAgJII ; in other words: 

p |]- J^q) is exactly -^Q[phq\. 
Notations. 

• We denote hy p ^ q the formula Vr(-iC[gAr] — t- -iC[pAr]) and by p ~ g the formula 
P E 9 A g C p, that is \/r{-^C[q^r\ ^ -iC[pAr]). 

In the sequel, we shall often write -F — t- C[p] instead of ~'C[p] — >• -i-F ; 

Then p C g is written \lr{Q\p^r\ — )• C[gAr]) and p ~ g is written Vr(C[pAr] o C[gAr]). 

Remark. We recall that C[p\ is not a formula, but a subset of A ; in fact, in some realizability 

models which will be considered below, there will exist a formula C[p] such that: 

|C[p]| = {r G Ac; r \\- C[p]}. In such cases, we can identify C[p\ with the formula C[p]. 

• If F is a closed formula, we shall write \\\- ^ fo mean that there exists a proof- like term 
9 such that {6, 1) |[]- F. From proposition 12. 12r i). this is equivalent to say that there exists 
a proof-like term 6 such that {O^p) ||]- F for every p ^ P. 

Proposition 3.4. 

i)eF-c[pAg]^(xe,p) ih^('7); 

(e,p) llf^('7)^x'CF-C[pAg]. 
ii) e |^Vr(C[pA(lAr)],C[g] ^ ±) ^ (xCp) llf -Cfe] ; 

(e,p) llf -C[g] ^ x'C |^Vr(CbA(lAr)],C[g] ^ ±). 
iii) Xf? |]-^R(ai,--- ,afc) ^/len (^,p) ||- ^R(ai, . . . ,0^) /or a// 13 
('R is a predicate symbol of arity k). 

Proof. 

i) If ^ |]- -^C\pAq], then ^*r . vr € X and therefore x^*'^'^ ^ -IL for all r € C[pAg]. Thus, we 
have: {xC*'^iPM) ^ A) that is {x^,p) * ('^jQ') € JL for every vr € II, i.e. (xC^P) IH~ J^il)- 
If (C,p) II]- JT'lg], we have (^,p) * (vr, g) G JL, thus {^ -kT:.,p/\q) E JL for all vr G II. Therefore, 
we have ^•tt'^ G X, that is x'C*'^ . vr G X for each r G C[pAq]. Therefore x'C \\~ ~'C[pAg]. 

ii) If .^ |]- Vr(C[j)A(lAr)],C[g] — ?• X), we have ^ * v . t .it G X if v G C[pA(lAr)] and 
r G C[q]. Therefore x? * ''" • ^'^ G -IL, thus {x^ * ^ • 7r,pA(lAr)) G X that is: 
(x?)P) * (''") 1) • (7r,r) G X. But (r, 1) is arbitrary in C7\/[g], and therefore: 
ix^,p) ||fC[g]^X. 

If {6.,p) II]- ~'C[g], we have {C,p) * {t, 1) • ('/r,r) G X, and therefore (^ * r . 7r,pA(lAr)) G X 
for each r G C[g]. Thus, we have S^ -k t .tt'" G X therefore x'C * "W • t . vr G X for each 
V G ClpA(lAr)]. It follows that x'C F Vr(C]pA(lAr)],C[g] ^ X). 

iii) Let r G | R(ai , . . . , a^) | ; we have ^ :*: r . vr G X for all vr G II, thus (^ * r . vr, a) G X for 
all a £ P, and therefore (C,p) * (r, 1) . (vr, (7) G X. D 
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Theorem 3.5 (Elementary properties of the generic ideal). 

i) (a, 1) ||- -ij7'(l) with a :: lA{pAq) => pAl. 

ii) {e,l)\^M^C[x]^Jix)) where 6 = \x{x)\y{{^ x){p)y){a)y 

with a :: lA{pAq) => q and (3 :: lA{pAq) =>pa(1a1). 

iii) (^,1) \l-yx\/y{J'{xAy),^J'{x) -^ J{y)) where 6 = XxXy(a){y){/3)x with a :: 

1a{p' A{q' Aq)) => q'A{{qAp')Al) and j3 :: {qAp')Ap =^ p'A{pAq). 

iv) (61,1) \\-\lx{^y{-^C[xAy] -^ J{y)) -^ ^J{x)) where 9 = XxXy{j){x)Xz{x'y)il3)z, with 

(3 :: pAq => qAp and 7 :: lA(rA(gAr')) =^ rA(lAp). 

v) (9,1) \hyxyyiJix),yQx^Jiy)) 

where 6 = XxXy{{x)Xz{{{x')i<^oy)^z'{x'x){l3)z'){a)z){'y)z, with 

a :: lA{p'A{rAq)) => (rAl)A(lAl) ; a' :: 1a{p' A{q' Aq)) => qAp' ; j3 :: pAq => qAp. 

Proof. 

i) Let {£,.,p) II]- i7(l) ; we must show that (a, 1) i^ (C;P) • {t^-, q) S A; that is to say: 
(a-k^ .IT, lA^pAq)) € JL. But, from proposition 12.81 we have: 
{a'k^.TT,lA{pAq)) y (^*7r,pAl) = (^,p) • (vr, 1). 
Now, we have (C,p) * (vr, 1) € JL by hypothesis on (Cp)- 

ii)Let {rj,p) \\\- ^C[q] and (vr, g) G |||J(g)|||- We must show that {9,1) -k {rj,p) . (vr, g) G JL, 
i.e. {9-kr] . tt, lA(pAg)) G JL. Thus, let r G C[1a(pa(7)] ; we must show that 9 * 7] . n'^ G -L. 
From proposition 13. 4( we have x'v |]~ C[pa(1a1)],C[(7] — )• _L. 

Now, we have /3r G C[pa(1a1)] and ar G C[q], therefore x'??*/5t . ar . vr G X thus 
ix)>^yiix'v)i/3)y)ia)y • vr^ G X thus * ?7 . ^^ G X. 

iii) Let {^,p') \\\-J{pAq), {ri,q') \\r^J{p) and (vr, g) G |||c7(g)|||. We must show that: 
(0,l)*(e,p')-(^,'z')-(vr,g)GX, i.e. (0 *?•??. vr, lA(yA(g'Ag))) G X. 
From propositions I2.12l fii) and 12.81 it suffices to show: 

{{a){ri)(fi)^-k'K,lA{p'A{q'Aq))) G X then {r]-k^i .TT,q' A{{qAp')Al)) G X, that is: 
(r?,g')*(^e,gAp')-(vr,l)GX. 

By hypothesis on {r],q'), we have now to show that {13^, qAp') ||]- J7'(p), i.e.: 
(/3^, qAp') • (tu,p) G X, or else (/3^ * w, {qAp')Ap) G X for all tZ7 G H. 
But, by proposition 12.81 we have: 

[P^-kvo, {qAp')Ap) >- {S, -k w , p' A{pAq)) = {Cp') * ('co,pAq) G X by hypothesis on {^,p'). 
iv) Let {E,,q) \\r J'{p) ^-^id {ri,r) ||]- Vg(-iC[pAg] — > J{q)) ; we must show that: 
(61, 1) * (?7, r) . (C, g) . (vr, r') G X, that is (6* * r/ . ^ . vr, lA(rA(gAr'))) G X. 
From proposition I3.4( i). we have x'C |]~ ~'C[(?Ap]. Let r G CIpAg], thus /3r G C[gAp] 
therefore x'^*f^T • p G X for every p G H. Therefore, we have Xx{x'OW)^*'^ • P G X, thus 
Xz{x'0{f^)^ |]- -iC [pAg] . From proposition 13. 4( iii). we have {Xz{x'C){f3)z,l) \^^C[pAq]. 
By hypothesis on {r],r), we thus have {r],r) -k {Xz{x'C)W)^^ 1) • i'^^l) ^ -"L, i-e.: 
(r? * Az(x'e)(/3)2 . ^, rA(lAg)) G X, thus ((7)(r/)Az(x'e)(/3)^ * ^, lA(rA(QAr'))) G X 
(proposition 12. 8p and therefore {9 -krj . S^ .n, lA{rA{qAr'))) G X. 

v) Let (^,p') ||]-v7(p) and {r],r) 111-9 EP ! we must show that: 

{9,l)i^{C,p') • {'n,r) . {7T,q) G X for ah vr G LI, that is (6* *^ . 77 . vr, lA(p'A(rAg))) G X. 

From proposition I3.4( i) . we have x'C |]~ ~'C[p'ap], thus Xz'{x'S,){l3)z' \\- ^C[pAp']: indeed, if 

r G C[pAp'] and p G LI, we have Xz'{x'OiP)z' *''' • P >~ {x'OiP)T*P ^ -"- since /3t G C[p'ap]. 

Then, from proposition [33^ iii), we have {Xz'{x'Oi(^)^' ^'^) III" ~'C[pAp']. But, by hypothesis 

on {r],r), we have (r/,r) ||]- {^C[pAp'] — )• ^C[qAp']). It follows that: 

(r?,r)(Az'(x'0(/3)^M) \h ^C[qAp'], i.e. _((aor/)Az'(x'0(/3)^',rAl) \h^C[qAp']. 

From proposition 13. 4r iil. we have {x'){oio'n)^^' ix'Oi/^)^' |]~ C[(rAl)A(lAl)], C[(7Ap'] -^ _L. 
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Let r G C[1a{p' A^rAq))], therefore ar G C[(rAl)A(lAl)] and a'r € C[gAp']. 
Thus, we have: 
(((x')(aor?)Az'(x'0(/5)^')(«)T)(7)-r*vr e X, therefore: 

(x)Az(((x')(ao^)A^'(x'C)(/3)-z')(")-2)(a')^*^^ ^ -"-• In other words: 

{ix)M{ix')iaov)^^'ix'Omz'){a)z)ia')z*7T,lAip'A{rAq))) G A 

or else, from proposition 12. 12( 11) : {6 -k S, • 1] . tt, lA{p'A{rAq))) G J_. D 

Theorem 3.6 (Density). 

For each function cf) : P ^ P, we have: 
(6,1) llf Vx(2C[xA</>(x)] -^ J{x)),yxJ{xA(^{x)) -^ ± 
where 6 = {(5)\x\y{x){'d)y , -d = {x)XdXxXy{x'x){a)y ; 
with a :: qAr => qA{qAr) ; j3 :: lA(pA(gAr)) =^ pA(lAg). 

Proof. Let (^,p) ||]- Vx(-iC[xA(?i>(x)] — > J{x)), {r],q) \\\-yx J'{xa(I){x)) and (7r,r) G H. 

we must show that {6 -k ^ . rj . 7r,lA{pA{qAr))) G JL ; thus, let tq G C[lA{pA{qAr))]. We 

must show 9 -k ^ .T] . vr'^o G X. 

We first show that {^tj, 1) ||]- -iC[(7A0((7)]. 

Thus, let (tZ7, r') G 11 and r G C[gA0(g)] ; we must show (i???, 1) * (r, 1) . (ro, r') G X 

i.e. (iJry^r . tu, lA(lAr')) G X or else ■drj-kT.vo'^ GX for each r' G C[lA(lAr')]). 

Now, '!9r/ * r . tu"^ yrj-kw"''^ and ar G C[gA(gA(/)(g))]. Thus, it suffices to show: 

(r? * tu, qA{qA(j){q))) G X or else (??, g) * {zu, qA(j){q)) G X. 

But this follows from the hypothesis on {r],q), which implies {ri,q) \\\- J{qA(j){q)). 

By hypothesis on ^, we have (^,p) ||]- -'C[gA(/>(g)] — > v7(<?)- It follows that: 

(^,p)*(T?r/, 1) . (7r,g') G X, that is (C*T?r/ . 7r,pA(lAg)) G X. 

But we have tq G C[lA(pA(gAr))]), thus /3ro G C[pA{lAq)]. It follows that ^•'i?r/ . vr^"^" G X. 

This gives the desired result, since 6 -k^ .rj . vr'^o >- ^■k'drj . tt^'^" . □ 

4. Countable downward chain condition 

In this section, we consider a standard realizability algebra A and a ^- model A4. We 
suppose that the set P (domain of variation of individual variables) has a power > 2 ". 
We choose a surjection e : P ^ 'P(n) and we define a binary predicate in the model A4, 
which we denote also by e, by putting: 

||nep|| = e{p){n) if n G N ; ||nep|| = if n ^ N 
(we use, for the predicate e, the notation nep instead of e{n,p)). 

Therefore, the predicate e enables us to associate, with each individual, a set of integers 
which are its elements. Proposition 14.11 shows that the following axiom is realized: 
For every set, there exists an individual which has the same integer elements. 
This axiom will be called axiom of representation of predicates on N and denoted by RPN. 

Proposition 4.1 (RPN). 

Ax(x)0 |]-VX32;Vn^"*(Xn ^nex). 

Proof. This formula is VX(Vx[Vn(ent(n),Xn -^ nex), Vn(ent(n),nex — ?• Xn) — ?> X] — )• X). 
Thus, we consider a unary parameter X : P ^ 7^(11) and a term ^ G A such that: 
^ |]- Va;[Vn(ent(n), Xn — > nex), Vn(ent(n),nex — )• Xn) — t- X]. 

We must show that Ax(a;)0 * ^ . vr G X, or else ^ :*: . . vr G X for every stack vr G 11. 
By definition of e, there exists pq £ P such that Xn = \\nepQ\\ for every integer n. 
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But, we have: ^ \\-\/n(ent{n), Xn — t- nepo); Vn(ent(n),nepo — ^ -^n) — )■ ±. 
Thus, it suffices to show that ||- Vn(ent(n), Xn — )• nepo) 
and 0\\-yn{ent{n),nepo^Xn). 
Recall that the predicate ent(a;) is defined as follows: 
|ent(n)|={n} if n G N and | ent(n)| = if n ^ N. 
Therefore, we have to show: 

0-kn.rj.pG X for all n € N, 77 |]- X{n) and p € Unepoll J 
0-kn.r]'.p'£A. for all n € N, r/' |]-nepo and p' £ X{n). 

But this follows from rj-kp G X and rj'-kp' £ X, which is trivially true, since Xn = ||nepo||- 

D 

We suppose now that {C, a, 1} is a forcing structure in A4. Then we define also the symbol 

£ in the ;B-model M by putting: 

|||nej?||| = ||nep|| x {1} for n,p £ P. In other words 

|||nep||| = {(vr, 1); vr G e {p){n)} if n G N ; |||nep||| = if n ^ N. 

Proposition 4.2. The predicate e^{q,n,p) is g = 1 1— )• nep. 
The formula q I- nep is C[qAl] -^ nep. 

Proof. Immediate, by definition of |||nep|||. □ 

Proposition 4.3. 

i) ^ ||- (C[p] — )• neg) =^ ((5.^,p) H-neg where 6 = Xx{x)^yix){a)y and a :: pAl ^ p. 
ii) (^)P) \^ neq ^ 6'S, \\- {C\p] ^ neq) where 5' = XxXy{x'x){a')y and a' :: p ^ pAl. 

Proof. 

We have {C,p) \\\-nep <^ {^,p) * (tt, 1) G X for all n G ||nep||, or else: 
(?>P) III" 'T-^P "^ ^^tt'^GX for each r G C[pa1] and vr G ||nep||. 
i) Suppose that ^ \\- {C[p] — )• neq), r G C[pAl] and vr G ||nep||. Then,we have: 
(5^ * vr"^ :^ ^ * ar . vr G X, since ar G C[p]. 

ii) Suppose that (^,p) \\-neq, t G C[p] and vr G ||nep||. Then,we have: 
(5'^*r.vr ^ ^*vr°'^ G X, since a'r G C[pAl]. D 

The notion of first order formula has been defined previously (see theorem 13. 3p . We extend 
this definition with the following clause: 

• ten is first order, for all terms t,u. 

Proposition 14.31 shows that theorem 13.31 remains true for this extended notion. 

We say that the forcing structure {C, a, 1} satisfies the countable downward chain condition 
(in abridged form c.d.c.) if there exists a proof-like term cdc such that: 

cdc 1^ VX[Vn^^*3_pX(n,p),Vn™VpVg(X(n,p),X(n,g) ^p = q), 
\/n'^'^^ypyq{X{n,p),X{sn,q) -^ q Q p) -^ 
3p'{Vn^^Vp(X(n,p) ^ p' Q p), {\/n''''^yp{X{n,p) -^ C[p\) -^ C[p'])}]. 

The intuitive meaning of this formula is: 

If X{n,p) is a decreasing sequence of conditions, then there exists a condition p' which is less than 

all of them ; moreover, if all these conditions are non trivial, then p' is non trivial. 

We intend, in this section to prove the: 
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Theorem 4.4 (Conservation of reals). 

If the c.d.c. is verified, then there exists a proof-like term cri such that: 

fcrl,!) Ilf VX3xVn^'^^(Xnonex). 

Proof. This means that the axiom RPN, which is reahzed in the ^-model Ai (see proposi- 
tion I4.ip is also realized in the generic 0-model A^. 
Notation. 

The formula \/q{C\pAq],q [- Xn — )• p [- Xn) reads as " p decides Xn " , and is denoted by 

p I- ±Xn. 

It can also be written as VgVr(C[pAg], q [- Xn,C\pAr] — > X^{r, n)). 

If A:" : P — )■ P(nxP) is a unary predicate in the S-model A/", 

and X^ : P^ — > P(n) is the corresponding binary predicate in the standard ^-model A4, 

the formula \/q{C[pAq],q [- Xn — >• p |- Afn) is thus also denoted by p [- zizXn. 

Theorem 4.5. If the c.d.c. is verified, there exists a proof-like term dec such that: 
dec If VXVpo3p'{(C[po] ^ Cb']),p' Cpo,Vn^'**(p' f ±Xn)}. 

Remark. This formula means that, for any predicate X, the set of conditions which decide Xn for 

all integers n is dense. 

We first show how theorem 14.41 can be deduced from this theorem 14.51 

From theorem 13. 2^ it is sufficient to find a proof-like term crIO such that: 

crIO |]- 1 f VX3xVn«'^^(Xn o nex) 

or else, since 1 j- -^A = Vpo((po h ^);C[lApo] — ^ ^)'- 

crIO If VXVpo[(po f Vg{Vn«'nt(Xn o neg) ^ ±}),C[lApo] ^ ^]- 

From theorem 14. 5( it is sufficient to find a proof- like term cril such that: 

cril If VXVpoVp'{(C[po] ^ C[p']),p' Cpo,Vnent(y f ±Xn), 

(Po f Vg(Vn^'it(Xn o neq) -^ ±)),C[lApo] -^ ±}. 
It is sufficient to find a proof-like term crl2 such that: 
crl2 If VXVpoVp'Kpo f Vg(Vn^"HXn o neg) ^ ±)),p' C po, 

Vnent(y i_ ±Xn),C[p'] -^ ±}. 
Indeed, we take then crl1= Xx\yXz\uXv{{x){cr\2)uyz){5)v with 6 :: lAp => p ; 
(recall that the formula C[po] ^^ C[p'] is written, in fact, as -^C\p'] -^ -iC[po])- 

We fix A'+ : p2 ^ V{U), po,p' € P, ^ If {Po f Vg(Vn^'^^(;fn o neg) ^ ±)), ?? |f p' E Po, 

C If Vn^'^t(p' f ibAfn) and r G C[p']. We must have {cr\2)Cr]CT \\- ±. 

We choose qo £ P such that we have ||nego|| = \\p' f Xn\\ for all n € N, which is possible, 

by definition of e. 

We trivially have ^ |f {po f (Vn™*(neq'o ^ Xn),yn'^^^{Xn -^ neqo) ^ ±)). 

But, the formula po f (Vn (nego ^ '^'T')) ^ri {Xn — )• neqo) — )■ _L) is written as: 

VrVr'(r f Vn''"t(nego ^ -^'n), r' f Vn''"t(Afn ^ neqo), C[{poAr)Ar'] -^ 1). 

Replacing r and r' with p', we obtain: 

C If (y f Vn^'^^(nego ^ -^f^), p' f Vn«'n^(A'n ^ nego), C[(poap')ap'] ^ ^)- 

From T G C[p'] and 7/ |f Vr(-iC[poAr'] — )• ^C[p'Ar]), we deduce that: 

A/i((7?)Ax(/i)(/3)x)(a)r |f ^^C[ipoAp')Ap'] 

where a, f3 are C-expressions such that a : p => pAp ; /3 :: pAg ^ {p^q)^Q- 

Thus, we have: 

(1) AyAz((r/)Ax(Cy^)(/3)x)(a)T |f 

{p' f Vn^"t(nego ^ -^n)), (p' f Vne'^^(;fn -^ neqo)) ^ -L. 
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• The formula p' [- \/n {ne qo — t- Xn) is written as ^n \/r{r I- ne qo — > p'/\r [- <Yn). 
But r |- nego = C[rAl] -^ neqo (proposition 14. 2p = C[rAl] — ^ p' j- X(n) by definition 
of qo. Therefore p' f Vn^"^* (n e go ^ -^n) = Vn^'^Vr((C[rAl] ^ p' f A'(n)) ^ pVr f Xn) = 
Vn^^VrVg'[Vg(C[rAl],C[p'Ag] ^ A'+(g,n)), C[(p'Ar)Ag'] -^ X+{q',n)]. 

Thus, we have: 

(2) \dXxXy{{x){a')y){/3')y |f {p' I- yn'^'^^n e qo -^ Xn)) 
with a' :: {pAr)Aq => taI and /3' :: {pAr)Aq =^ pAq. 

• The formula p' [- Vn® (A'n — )■ neqo) is written as Vn® Vr(r j- Xn — > p'Ar [- neqo), 
or else: Vn^'^*Vr(r [- Xn, C[(p'Ar)Al] -^ neqo), that is, by definition of qo'- 
y^enty^^^ ^ Afn, C[(/Ar)Al] ^ p' ^ '^^)- But, we have: 

C If- Vn'^'^Hp' F i'^'n), in other words C h ^n''''^^r{r \- Xn, C[p' Ar] ^ p' \- Xn). Therefore: 

(3) \n\xXy{C,nx){a")y \\-p' [- Vre™*(<Yn — )• neqo) with a" :: {pAr)Al =^ pAr. 
It follows from (1,2,3) that: 

{{XyXz{{rj)XxiCyz)il3)x){a)T) XdXxXy{{x){a')y){p')y) XnXxXy{Cnx){a")y |^ ±. 
Therefore, we can put crl2 = 
XxoXyoXzoXu{{XyXz{{yo)Xx{xoyz){j3)x){a)u)XdXxXy{{x){a')y){l3')y)XnXxXy{zonx){a")y. 

D 



The remaining of this section is devoted to the proof of theorem 14. 5[ 

Definition of a sequence by dependent choices. In this section, we are given a fixed 

element po (z P and a finite sequence of formulas with parameters F[n,p,p'). We are also 

given a proof- like term dse such that: 

dse \\-\/nip3p' F{n,p,p'). 

Remark. The aim of this section is to write down a formula ^{x, y) which represents the graph of 

a function : N — )► P such that the formulas 0(0) = po and Wn F{n, 0(n), (j){n + 1)) are realized 

by proof-like terms. We shall only apply the results of this section to a particular sequence F of 

length 3. 

From theorem 12.1( 1) (axiom of choice for individuals), there exists a function f : P^ ^ P 

such that: <^ |]- VnVp(VA;'''^*(F(n,p, /(n,p. A;)) ^ -L) ^ \lp'{F{n,p,p') -^ ±)). 

It follows that Ax(dse)(?)x |]- VnVp(VA;^'i*(F(n,p,/(n,p, A;)) ^ -L) ^ -L). 

We define a function denoted by {m\n), from P^ into P, by putting, for m, n € P: 

(mjn) = 1 if 7TT-, n € N and m < n ; {ni\n) = otherwise. 

Obviously, the relation (min) = 1 is well founded on P. 

Thus, from theorem II. lir ii). we have: 

Y \^yk{yi{ent{l),F{n,p,f{n,p,l)) ^ (lik) + l),ent{k), F{n,p, f{n,p_,k)) ^ ±) 

-)■ yk{ent{k),F{n,p, f{n,p,k)) -^ ±). 
Therefore, if we set Y = Xx{Y)XyXz{x)zy, we have: 
Y' \^yk^^^{yi^^\F[n,p,f{n,p,l)] ^ {lik) + l),F[n,p, f{n,p,k)] ^ 1} 

^Vrnt(F[n,p,/(n,p,A;)] ^ ±). 
Thus, we have: 
Ax(dse)(?)(Y')2; \^yk''''^{W\F[n,p, f{n,p,l)] -^ {l\k) + l),F[n,p, f{n,p,k)] ^ ±} ^ ±. 

We define the formula G{n,p,k) = yi^^^{F{n,p, f{n,p,l)) — )• {l\k) ^ 1) and the finite 
sequence of formulas H[n,p,k) = {G{n,p,k),F{n,p, f{n,p,k))}. Then, we have shown: 
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Lemma 4.6. dseO |]- VnVp3/c^"^{F(n,p, /c)}, with dseO = Ax(dse)(?)(Y')a;. 

Remark. The meaning of H{n,p, k) is "fc is the least integer such that F{n,p, f{n,p, fc))". 

Lemma 4.7. Let cp be a proof-like term such that, for every m, n € N, we have: 
cphcm .n.^.ri.C,.T[>- S,*tt (resp. rj-kir, (-kir) if m < n (resp. n < m, m = n). Then: 
i) cp If Vm™Vn'^"'*((m/n) / 1, {njm) / l,m / n ^> _L). 
ii) dsel \\^\/n\/pik''''Nk"'''\H{n,p,k),H{n,p,k'),k ^ k' -^ ±) 

with dsel = \k\k'\x\y\x'\y'{{cpk'k){x)k'y'){x')ky, where y,y' are two sequences of 
distinct variables of the same length as the sequence F. 

Proof. 
i) Trivial. 

ii) Let ^ \\-G{n,p,k), ff \\- F{n,p, f{n,p,k)), C' \\-G{n,p,k'), ff \\- F{n,p, f{n,p,k')) 
and C \\-kj^ k' . We must show cp • fe' . fc . {C)U^ • iOkv- C • tt G X. 
If A; = k' , it remains to prove ( -k it (^ JL ; but this is true because we then have ( \\- _L. 
If k' < k, it remains to prove ^-k k^ .ff .tt G X. This results immediately from: 
^ If VA;'™*(F(n,p,/(n,p,fc')) ^ (k'lk) / 1) and thus: 
^ \\- ent{k'),F{n,p, f{n,p,k')) ^ ±, since k' < k. D 

We now define the binary predicate: 

$(x,2/) =yX{ynypyk''''\H{n,p,k),X{n,p) -^ X{sn,f{n,p,k))),X{0,po) ^ X{x,y)) 

and we show that ^{x,y) is a sequence of conditions (functional relation on N) and also 

some other properties of $. 

Remark. Intuitively, the predicate $ is the graph of the function (j) of domain N, recursively defined 

by the conditions: 0(0) = po ; (pin + 1) = f'{n, (j>{n)) 

where f'{n,p) is f{n,p,k) for the least k such that F{n,p, f{n,p,k)). Unfortunately, we cannot 

introduce /' as a function symbol because, unlike /, it is not defined in the ground model. 

Lemma 4.8. 

i) XxXyy |f $(0,po)- 

ii) Xx{x)II If Vy($(0^y) -^ y = Po). 

in) rec \\-yxyy\fk^^\H{x,y,k),^{x,y) -> ^{sx, f{x,y,k))) 
where rec = \k\x\y\x' \z\u{zkxy){x')zu 
and y is a sequence of distinct variables of the same length as F . 

Proof. 
i) Trivial. 

ii) We define the binary predicate X : P^ ^ ^(n) by putting: 
^"(0, q) = ||g = Poll and X{p, q) =% iov p ^ 0. 

We replace X with X in the definition of $(0,?/). Since we have sn 7^ for all n (^ P, we 
obtain ||<I>(0,y)|| D ||T,po = Po ^ U = Po|| ; hence the result, 
iii) Let e |f G(a:,y, A;), ff \^ F{x,y, fix,y,k)), ^' |f $(x,y), 
C \r'ynyp\/k''''^{H{n,p,k),X{n,p) ^ X{sn, f{n,p,k))), 
v\\-X{0,po) and tt £ \\X{sx, f{x,y,k))\\. 
Then ^'C^ If -^(a^,y), therefore ( -kk. ^ ,f] , ^'(v 'Tt e ± i.e. (rec)M???'C^^ *7r G X. D 
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Lemma 4.9. cdcl |]- Vn^"'*3p<I>(n,p) where: 

cdcl = \n{{n)\xXy{x)\z{cdi^)zy)Xx{x)\xXy y 

with Cdl = XxXy{(iseO)XlXz{y){rec)lzx ; 

z is a sequence of distinct variables of the same length as H . 

Proof by recurrence on n ; we have XxXyy \\-^{0,po), therefore Xx{x)XxXy y |]- 3y <I>(0,y). 

We now show that cdl \\- ^{x,y) -^ 3y^{sx,y). 

Thus, we consider ^ \\-^{x,y), r/ \\-\/y{^{sx,y) — )• _L). 

We have rec \^yi^'^^{H{x,y,l),^{x,y) -^ ^{sx, f{x,y,l))) (lemma B^ii) . 

T] |]- {^{sx, f{x,y,l)) -^ ±), and therefore: 

XlXz{r]){\'ec)lz^ \\-yi^^^{H{x,y,l) -^ _L), where z has the same length as H. 

Now, we have dseO \\-3k^^^{H{x,y,k)} (lemma l4.6p ; therefore: 

(dseO)A/Az(r/)(rec)/4 If^, that is (cdl)Cr/ \\-±. 

Thus, we have shown that cdl |]- Vy(<I>(x,y) — )• 3y^{sx,y)), and it follows that: 

XxXy{x)Xz{cd^)zy \\-3y^{x,y) — )• 3y^{sx,y). D 

Lemma 4.10. There exists a proof-like term Cdc2 such that: 
Cdc2 []-Vn^"VpVg'($(n,p),<I)(n,g') ^p = q). 

Proof. We give a detailed proof, by recurrence on n. It enables us to write explicitly the 

proof-like term Cdc2. 

For n = 0, the lemma 148^ 11) gives the result: $(0,p), $(0, q) ^ p = q- 

Let us fix m and suppose that yp\/q{^{m,p), ^{m, q) —> p = q)- 

We define the binary predicate: 

^{n,q) = \/pyk {n = sm,H{m,p, k), <I>(m,,p) — )• g = f{m,p, k)). 

We show that \^yp\/k°^^^{H{n,p,k),^{n,p) — )• "^{sn, f{n,p,k))), that is to say: 

{H{n,p, k), $(n,p), sn = sm, H{m, q, I), ^{m, q) — )• f{n,p, k) = f{m, q, I)}. 
But we have ||sn = sm\\ = \\n = m\\, ^{m,p), $(m, g) -^ p = qhy hypothesis of recurrence ; 
H{m,p,k),H{m,p,l) —^k = l (lemma l4.7r ii)). and it follows that f{n,p,k) = f{m,q,l). 
If we put ^'{x,y) = <I>(x,y) A ^(a;,y), we have: 

\\-\/p'ik^^^{H{n,p,k),"^'{n,p) -^ '^'{sn, f{n,p,k))) ; we have also |]-^'(0,po)- This shows 
that \\- ($(x, y) -^ ^'{x, y)) by making X = ^' in the definition of $. 
Thus, we have \\-^{sm,q) -^yp\/k'^^^{H{m,p,k),^{m,p) -^ q = f{m,p,k)). 
It follows that: 

\\- $(sm, q), ^{sm, q') — )• 

yp\/k^^^ {H {m, p, k), ^{m,p) -^ {q = f{m,p, k)) A (g' = f{m,p, k))) 
and therefore \\- ^{sm,q),^{sm,q') -^Vp^k {H{m,p,k),^{m,p) -^ q = q')- 
Thus, we obtain [|- <I>(sm, g), <I>(s?tt,, g') -^ q = q' , since we have cdcl \^3p^{m,p) by 
lemma WM and dseO \\-yp3k°^^{H(m.p.k)} bv lemma H^ D 



Resumption of the proof of theorem \4-5\ In order to show theorein 14.51 we fix po (^ P and 

a binary predicate X : P^ ^ ^(n). 

We have to find a proof-like term dec such that: 

dec 1^ 3p'{{C[po] -^ C[p']),p' Q pQ,^rf''\p' \- ±Xn)}. 
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We apply the above results, taking for F{n,p,p') the sequence of three formulas: 

{iC[p]^C[p']),ip'Qp),p'^±Xn}. 

Lemma 14.111 below gives a proof-like term dse such that dse ||- VnVp3p'{F(n,p,p')}. 

Lemma 4.11. dse \\-\/p3p'{F{n,p,p')} 

where dse = \a{\h{aII)\xXy h)\z{cc)\k{{a\x xz)(3')\x\y{k){y){a)x 

with (3' = Xx\y{x){j3)y , a :: {pAq)Ar =^ vaq and /3 :: {phq)Ar => phr. 

Proof. The formula we consider is written as Vp'[(C[p] -^ Ci[p']),p' Q p,{p' |- ±^n) — )• 

±]^±. 

Thus, let ^ II- Vp'[(C[p] -^ C[p']),p' Qp,{p' I- ±Xn) -^ ±]. We must show (dse)C |^ ±. 

• We show that \h{ill)\x\y h |f ^{p j- Xn): 

Let C |]~ (p 1~ '^^) ; therefore, we have XxXyC, |]- {p \- ±Xn) ; indeed: 

pl-±Xn = yq{C[pAq],q I- Xn -^ p fr Xn). 

But, we have S, If- {C[p] -^ C[p]),p E P , (p f- ±Xn) -^ _L ; 

we have / |-|- C[p] — > C[p] and / \\- p Q p (since p' Q p = \/q{^C[pAq] -^ ^C[p'Aq])). 

Thus {^II)XxXy( \\- _L, hence the result. 

• We now show Xz{cc)Xk{{S^Xxxz)f3')XxXy{k){y){a)x \{- {p [- Xn). 
Thus, let T € C\pAq] and vr € <Y+(g, n). We must show: 
{{^XxxT)f3')XxXy{kTr){y){a)x -kTT £ X. But, we have Xxxt \\- ^^C\pAq], 

j3' \[-pAq C p (lemma r4.12p and ^ |]- (-iC[pAg] — )• -^Q[p]),pAq Q p , {pAq j- ±Xn) -^ ± ; thus: 

{^Xxxt)I3' ||- ((pAg [- ±A:'n) -^ _L). Therefore, it is sufficient to show: 

XxXy{W.„){y){a)x |f {pAq \- ±Xn), i.e.: 

AxA2/(k^)(y)(a)2; |]- Vr(C[(pA(7)Ar], r [- A'n -^ pAq \- Xn). In fact, we show: 

AxAy(k^)(y)(a)a; ||- Vr(C[(pA(7)Ar], r [- Xn -^ ±). 

Thus, let V G C[(pA(7)Ar] and ?/ |]- (?" |- Xn). We must show: 

(k7r)(?/)(a)f *p € i for all p € H, i.e. {r]){a)v -kn G X. But, we have {a)v € C[rAg], 

therefore {ri){a)v \\- X^{q,n), hence the result, since vr € A:'~'"(g, n). 

• It follows that {Xh{^II)XxXy h)Xz{cc)Xk{{S,Xx xz)P')XxXy(k)(y){a)x \\- ± 

i.e. (dse)^ Ij- X, which completes the proof. D 

Lemma 4.12. Let j3 :: {pAq)Ar =^ pAr. Then XxXy{x){f3)y ||- VpVg'((pA(7) Q p). 

Proof. This formula is written VpV5Vr(-iC[pAr],C[(pA(7)Ar] — > X). 

Therefore, let ^ |]- -iC[pAr],T € C[(pA(;)Ar], thus /3r G C[pAr] and (^)(/3)r |]- X. 

Thus, we obtain XxXy{x){l3)y • ^ . r . vr G X for every vr G 11. D 

We propose now to apply the countable downward chain condition to the binary predicate 
^{x,y). Lemmas 14.91 and I4.1UI show that the first two hypothesis of the c.d.c. are realized 
by cdcl and cdc2. The third one is given by lemma l4. 131 below. 

Lemma 4.13. There exist two proof-like terms cdc3 and for such that: 
i) Cdc3 |]-Vn^"'VpVg(<I>(n,p),$(sn,g) -^ qQp). 
ii) for 11- Vn'^"Vg($(sn,g) ^ g f ±Xn). 

Proof. By lemma l^^ iii). we have: 

rec \\-\/k^'°^^{H{n,p,k),^{n,p) -^ ^{sn, f{n,p,k))). Using Cdc2 (lemma li?TO|) . we get: 
\\-yk^^^{H{n,p,k),^{n,p),^{sn,q) ^ q = f{n,p,k)). 
Now, H{n,p, k) is a sequence of four formulas, the last two of which are: 
f{n,p,k)Qp and f{n,p,k) I- ±Xn. 
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i) It follows first that \\-yk^'^^{H{n,p,k),^{n,p),^{sn,q) -^ qQp). 
Hence the result, since we have dseO \\-3k^^^{H{n,p,k)} (lemma l4.6p . 
ii) It follows also that \\-yk^'^^{H{n,p,k),^{n,p),^{sn,q) -^ q I- ±Xn). 
Thus, we obtain \\-\/n^^^\/q{^{sn, q) -^ q I- =b^n) since we have cdcl |]- Vn®'^*3p<I>(n,p) 
(lemma 112]) and dseO |]- VnVp3A;™*{^(n,p, /c)} (lemmalM])- D 

We can now apply the c.d.c. to the predicate <I>(x,y), which gives a proof-like term cdcO 

such that cdcO \\-3p'{(}{n,p,p')} with: 

n{n,p,p') = {yn'"^^yp{<^{n,p) -^p' Qp), Vn™Vp($(n,p),^C[p] -^ ±),^C[p'] -^ ±}. 

Therefore, in order to complete the proof of theorem 14.51 it is sufficient to find proof-like 

terms decO,dec1 ,dec2 such that: 

decO If Vp'(Jl(n,p,y),-C[po],C[p'] ^ ±) ; 

decl |]-Vp'(Jl(n,p,p') ->p' Cpo) ; 

dec2 If Vp'(fl(n,p,p') -^ Vnent(y f ±Xn)). 

Thus, let ojQ,oJi € A be such that: 

Wo |]-Vn«''^tVp($(n,p) ^ p' E p) and ui |]- Vn™^Vp(^(n,p), ^C[p] -^ l),^C[p'] -^ ± 

Applying lemma B^ i) with n = 0,p = pq, we obtain {ujQ)\xXyy \\- p' Q pq. 

Therefore, we can take decl = XaXb{a)XxXyy. 

Lemma 4.14. cdc4 \\- (C[po] -^ Vn'^"'*Vp(<I>(n,p), -■C[p] -^ ±)) 
where cdc4= XaXbXc{{bXxoXxiXx2Xx3XxXy{x){xi)y)Xxxa)c. 

Proof. Let r G C[po]) C If ^{n,p) and rj \\- -^C\p]. 

Making X(x,y) = -i-iC[y] in the definition de <I>, we get: 

e hyn'yp'yk^^\G[n',p',k],F[n',p'J{n',p',k)],^^C[p'] ^ --C[/(n',p', A;)]), 

We have Ax(x)t |f -i-iC[po]- 

Moreover, since F[n',p', q] = {{^C[q] — > -iC[p']), ((7 Q p'), q f ibA'n}, we easily get: 

XxoXxiXx2Xx3XxXy{x){xi)y \\- 

yn'yp'yk^^\G[n',p', k],F[n',p', f{n',p', fc)], --C[p'] ^ --C[/(n',p', A;)]). 
It follows that ((^A2;oAxiAx2Ax3Aa;A?/(x)(xi)?/)Aa;(x)T)?7 If ±, i.e. (cdc4)r^r7 |f ±. D 

From lemma 11. 141 we immediately deduce Xx{ijJi){c6cA)x |f C[po]i ~'C[p'] -^ X. 
Therefore, we can put decO = AaA6Ax(6)(cdc4)x. 

Lemma 4.15. 

i) lefO If ypyq{p {- Xn, q^p^ q\- Xn) with lefO = XxXyXz{cc)Xk{{y)Xu{k){x)u)z. 
ii) lefl If yp\/q{p f ±Xn, q Q p ^ q ^ ±Xn) with 
lefl = XxXyXzXu{{\eiO){cc)Xh{{y)Xv{h){x)vu)z. 

Proof. 

i) This is immediate, if we write explicitly the formulas: 
p |- Xn = Vr(C[pAr] -^ A'+(r, n)) ; 
q n p = Vr(-iC[pAr] -^ -iC[gAr]) ; 
ql-Xn = Vr(C[gAr] -^ X+{r, n)). 

We declare x : p f Xn, y : q Q p, z : C[qAr], k : -^X^n. 
ii) We write down the formulas: 
p |- ±Xn = Vr(C[pAr], r f /Yn — >■ p f A^n) ; 
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q \Z p = Vr(-iC[pAr] -^ -iC[gAr]) ; 

q I- ±Xn = Vr(C[gAr], r ^Xn^q\- Xn). 

We declare x : p\- ±Xn, y : q Q p, z : C[qAr], n : r j- Xn, v : C[pAr], h : -i(p \\- Xn). D 

By means of lemmas 14. 13( ii) and 14. isl and also ujq |]- Vn Vp($(n,p) -^ p' Q p), we obtain: 
XnXx{{\ei^){ior)nx){uJo)nx \\-yn^'^^yq{^{sn,q) ^ p' j- ±Xn). 
But, we have Cdcl \\-\/n^^^3p^{n,p) (lemma \T^ ; it follows that: 

ATi(cc)AA;((cdc1)(s)n)Ax(A;)((lef1)(for)nx)(wo)«^ FVn<^"^(pA^ l ±Xn). 

Thus, we can put dec2 = AaA6An(cc) A/i;((cdc1 )(s)n) Ax(/i;)((lef1 )(for)nx)(a)nx. 

This completes the proof of theorem 14.51 □ 



5. The ultrafilter axiom on N 

Let us consider a standard realizability algebra A and a ^-model A4 in which the individual 

set (which is also the set of conditions) is P = 'P(n) . 

The binary relation e is defined by ||nep|| = p{n) if n S N ; otherwise ||nep|| = 0. 

1 is defined by l(n) = for every n € N ; 

A is defined by \\ne {p/\q)\\ = \\nep Aneq\\ for every n G N. 

The axiom of representation of predicates on N (RPN). We define the following recursive 
function of arity A;, denoted by (ni,...,n;s) (coding of /c-uples): (^1,712) = ni + (ni + 
n2)(ni +712 + l)/2 ; (ni, . . . ,nfc+i) = {{ni, . . . ,nk),nk+i). 

Proposition 5.1. |]- VXBxVyJ"*. . . Vy^"*((yi, . . . ,2/^) ex o X{yi, . . . ,yk)) where X is a 
predicate variable of arity k. 

Proof. Let X : P^ ^ ^(n) be a predicate of arity k. We define a G P by putting: 

a{n) = X(ni, . . . , n^) for n G N, n = (ni, . . . , n^). Then, we have immediately: 

/ 1^ Vypt . . . V2/ft((yi, ...,yk)ea^ X{yi, . . .,yk)) and 

I\^yy1^K..yyl^\X{yi,...,yk)^{yi,...,yk)ea). 

It follows that: 

Xx{x)I If VX3xVyft . . .yyr\{yi, ...,yk)ex^ X(yi, . . .,yk)) and 

Ax(x)/ if VX3xVyft , , ,yyent^x{yi, ...,yk)^ (yi, ■ ■ .,yk)ex). 

Then, it suffices to apply theorem 11.131 D 

The comprehension scheme for N (CSN). Let P[y,xi, . . . ,Xfc] be a formula the free vari- 
ables of which are taken among y,xi, . . . ,Xk. We define a fc-ary function gp : P — )• P, 
in other words gi? : P'^ xN — > ■p(n) by putting 5ri?(pi, . . . ,pyfc)(n) = ||P[n,pi, . . . , j5fc]|| for 
every n G N. 

Proposition 5.2. We have |f Vxi . . . VxjtVy*"^(ye5i?(xi, . . . , x^) -H- P[y,xi, . . . ,Xfc]) /or 
every formula P[y, xi, . . . ,Xfc]. 

Proof. Indeed, we have trivially: 

/ If Vxi...VxfcVy™*(yegF(xi,...,Xfc) -^ F[y,xi, . . . ,Xk]) and 

/ If Vxi . . . VxfcV?/™*(P[y,xi, . . . ,Xfc] ^> yegpixi, . . . ,Xfc)). 

Then, it suffices to apply theorem 11.131 □ 
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Remark. 

The binary function symbol a is obtained by applying CSN to the formula yexi Ay s X2- 

The generic model. We denote by C[x] the formula \/m^^^3n^^^{m -\- n)ex, which says 
that the set x of integers is infinite. The predicate C is defined by this formula: for every 
p & P, \C\p]\ is, by definition, the set {r S A; r [^C[p]}. 
It follows that the condition 7 :: t{pi, . . . ,pn) =^ u{pi, . . . ,pn) is written as: 

Xx'yX |]-Vpi...Vpn(C[t(pi,... ,Pn)] -^ C[u{pi,...,Pn)])- 

Therefore, in order to complete the definition of the algebra B (and of the ;B-model M), it 

remains to find proof-like terms aO)"i)02,/3oj/3i,/32 such that: 

oq |]- VpVgVr(C[(pAg)Ar] — )• C[pA(gAr)]) ; ai |]-Vp(C[p] ^^ C[pAl]) ; 

a2 hypyqiC[pAq] ^ C^) ; /3o ^ Vp(C[p] ^ C[pAp]) ; /3i |f VpV(?(C[pA(7] ^ C[qAp]) ; 

/?2 |]-VpV^VrVs(C[((pAg)Ar)As] ^ C[{pA{qAr)) as]) . 

Now, we easily have, in natural deduction: 

h 9 : yn{nex — )• nex') — t- (C[x] — > C[x']) with 9 = \f\u\m\h{um)\n\x{hn){f)x. 

Therefore, by theorem 11.31 (adequacy lemma), we can put ai = 9al and /?, = 0/3?, with 

proof-like terms a*,/3?(0 < « < 2) such that: 

h aS : VXVyVZ{(X A F) A Z ^ X A (Y A Z)} ; h qJ : VX{X ^ X A T} ; h a^ : 

vxvyjx A y ^ y} ; h /3^ : vx{x ^ X ^x} ■ h /3j : vxvy{x A y ^ y A X} ; 
h PI : vxvyvzvc/{((x A y) A z) A [/ ^ (X A (y A Z)) A [/}. 

The countable downward chain condition. In this section, we show the: 

Theorem 5.3. 

The forcing structure {C,a,1} satisfies the countable downward chain condition in Ai. 

Remark. The proof of this theorem is a formalization of the following simple result: 

The set of infinite subsets of N with the preorder "p C q <^ p \ 9 is finite" , satisfies the countable 

downward chain condition. 

The proof is as follows: let p„ be a decreasing sequence for this preorder ; put /i„ — f]j^^„Pi, kn — 

the first element of h„ which is > n, and consider {fc„ ; n e N} which is an infinite subset of N. 

Proof. We have to find a proof-like term cdc such that: 

Cdc |^VX3x{Vn*'"*3pX(n,p),Vn^'^VpVg(X(n,p),X(n,g) ^p = q), 

yn'^^^ypyq{X{n,p),X{sn,q) -^ q ^ p) -^ 

Vn^'iVp(X(n,p) ^xQp)A {\Jn'''^^'ip{X{n,p) -^ C[p]) -^ C[x])} 
where p\^ q\s the formula Vr(C[pAr] — )• Q[qAr\). 

By theorem 11.131 this amounts to find a proof-like term cdc' such that: 
Cdc' |^VX3x{Vn^"^3pX(n,p),Vn^"VpVg(X(n,p),X(n,g) ^p = q), 

\/n^"^ypyq{X{n,p),X{sn,q) — > g E p) ^• 

Vra^'^Vp(X(n,p) -^xQp)A {yn"'^yp{X{n,p) -^ C\p]) -^ C[x])}. 
By theorem 11.31 (adequacy lemma), given a formula F, we can use the following method to 
show \\- F: 

First, show ||- Ai, . . . , \\- Aj., then show j4i, . . . ,Ak\- F by means of the rules of classical 
second order natural deduction (which contains the comprehension scheme), and of the 
following axioms which are realized by proof-like terms in the ^- model Ai: 
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• t ^ u for all closed terms t, u which take distinct values in M. 

• Vx]°* . . . Vx)?*(t(2;i, . . . , Xk) = u{xi, . . . , Xk)) for all the equations between terms which are 
true in N. 

• The foundation scheme (SCF, see theorem I l.lH il which consists of the formulas: 
VXi . . . VXfc{Vxint[Vyint(^^y^ ...,Xky^ fiy,x) / l),Xix, ...,XkX^±] 

-^yx"'^{Xix,...,XkX^ ±)} 
where f : P^ ^ P is such that the relation f{y,x) = 1 is well founded on N. 

• The axiom of choice scheme for individuals (ACI, see theorem 12. ip which consists of the 
formulas yx(iy^^^F{x, fF{x,y)) ^)-yy F{x,y)) ; 

X = (xi, . . . ,Xk) is a finite sequence of variables, \/x^y F is an arbitrary closed formula, 
and fp is a function symbol of arity A; + 1. 

• The axiom of representation of predicates on N (RPN, see proposition ETT]) which consists 
of the formulas VX3xVy*'^*((yi, . . . , y^) e x o Xy) ; 

y = {yi, . . . ,yk) is a sequence of k variables and X is a predicate variable of arity k. 

• The comprehension scheme for integers (CSN, see proposition I5.2p . which consists of the 
formulas yx\/y^^^{y e gpix) o F[y,x]) ; 

X = {xi, . . . ,Xk) is a sequence of k variables, VxVy"^*F is an arbitrary closed formula, and 
gp is a function symbol of arity k. 

Lemma 5.4. h ^p\/q{j) ^ q -^ 3m ^n {n A- mep ^- n + meq)). 

Proof. We apply the CSN to the formula F[y,x\ =y^x; thus, we obtain: 

h VxVy''^* (ye^x-^y^x) 
using the notation -ix for gpix). 

We have p\Z q = Vr(C[pAr] -^ 0[q^r]) and therefore p^ q \- 0[p/\^q] -^ C[gA-ig]. 
But, we have Ci[q/\^q] h \/m}'"^3n}^^{m + n£q/\m + n^q) l-_L, and thus: 
pQq I 'C[pA—iq], that is \- p Q q ^ 3m^^^yn^^^-'{m + nep A—'{m + ne q)). 

Conversely, from the hypothesis: 

\/n'^^^{m' + n' ep ^ m' + n' e q) ,ym^^^3n^^^ {m + nep Am + ner), we deduce: 

Vm^'^^3n™*((m,' + m) + nep A {m' + m) + ner), then: 

'imF^^3n™^{m + {m' A- n)eq Am + {m' + n)er) then: 

\/m}^^3'n}^^{m, + neqAm + ner). Therefore: 

Vn' ^^^{m,' + n' ep ^ m' + n' eq) h C[pAr] — >■ C[(?Ar] and thus: 

3m,'\/n'^'^^{m,' -\- n' ep ^- m,' -\- n' e q) h C[pAr] — ?> C[gAr]. □ 

Applying RPN and the comprehension scheme, we obtain \\-yX3hD{h,X) with: 

D{h,X) =yk'''^W''\{k,n)eh^yqW''\i < n,X{i,q) -^ keq)). 

Remark. The intuitive meaning of D{h,X) is: h is the individual associated with the decreasing 

sequence of conditions X' , the n-th term of which is the intersection of the n first terms of the 

sequence X. 

We apply CSN to the formula F{k,n,h) = {k,n)eh. Thus, we obtain: 

h ynyMk'''^yn{k e gp (n, h)^{k,n)eh). 

We shall use the notation /i„ for gp{n,h). Therefore, we have: 

h VnV/iVA:^'^^(A:e/i„ ^ {k,n)eh). 
and it follows that: 

D{h,X) hyk'''^yn'''\k£hn^yqW''\i < n,X{i,q) ^keq)) 
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We put ^{k,h,n) = 3i™*{Vj™*(j + nehn^ (j < «) / l)i i + nehn, k = i + n}. 
Remark. The intuitive meaning of $(fc, h,n) is: " k is the first clement of ft,„ whieh is > n ". 
We apply CSN to the formula F{k, h) = 3n"^^ ^{k, h, n). Thus, we obtain: 
^^Mk'''\k£gF{h) o 3ni°*$(fc,/i,n)). 
We shall use the notation inf(/i) for gpih). Therefore, we have: 

h V/iVfei^^fee inf(/i) ^ 3n'''^ ^{k,h,n)). 
The hypothesis of the c.d.c. are: 
Ho[X] =Vni°t3pX(n,p) ; 

Hi[X] = yn'''^ypyq{X{n,p),X{n, q) ^ p = q) ■ 
H2[X] =W''^\/pyq{X{n,p),X{sn,q) ^ q Q p) ; 
Hs[X] = Vni^Vp(X(n,p) ^ C^]). 

We put H[X] = {Ho[X],Hi[X],H2[X],H3[X]} and H,[X] = {Ho[X],Hi[X],H2[X]}. 

Thus, it is sufficient to show: 

D{h,X),Hj^X] h Vn^^^Vp(X(n,p) -^ inf(/i) C p) and 

D{h,X),H[X] h C[inf(/i)]. 

Notation. The formula Vn (nep -^ neq) is denoted by p Q q. 

Lemma 5.5. D{h,X) h Vm'"Vn*"*(/i„+„ C /i„). 

Proof. This formula is written Vr7T,''^*Vn^'^^VA;^'^^(/ce/i„+m. -^ kehn). Now, we have: 
D{h,X) hym'''^yn'''^yk'''\kehn+m ^yqW''\i <n + m,X{i,q) ^ keq)) ; 
hym'''^yn'''^yk'''^[yqW''\i <n + m,X{i,q) -^ keq) -^VqW^'^i < n,X{i,q) -^ keq)\: 
D{h,X) h ym'''^W''^yk'''\yqW''\i < n,X{i,q) ^keq) -> keK). D 

Lemma 5.6. D{h,X),HQ[X],Hi[X] '^\/n''^Nk'''Np{X{sn,p), kep, kehn ^ kehsn). 

Proof. We have D{h,X), int(A;), int(n) h yp\/i^^^{i < sn,X{i,p) —> kep) -^ kehsn- 
But, we have int(n), int(i), i < sn h i <n\/ i = sn, and therefore: 
int(n), Mpyi {i < n,X{i,p) -^ kep), yp{X{sn,p) — > kep) h 

\/pyi^^^[i < sn,X{i,p) — )• kep). 
It follows that: 

D{h,X), int{k), int(n) h \/pW^^{i < n,X{i,p) — > kep),Mp{X{sn,p) -^ kep) -^ kehsn, 
i.e.: 

D(h,X), int(A;), int(n) h kehn,^p{X{sn,p) -^ kep) -^ kehsn- Therefore: 
D{h,X), ini{k), \nt{n),HQ[X],Hi[X] \-yp{kehn,X{sn,p),kep ^ ke hsn). D 

Lemma 5.7. D{h,X),Hj,X] h Vn*"Vp(X(n,p) ^pQ /i„). 

Proof. By recurrence on n. We must show: 

D{h,X),HJiX],int{n) h yp3m''^^W'^\X{n,p),l + mep ^ I + mehn). 

For n = 0, we have D{h,X) h VA;^'^^(Vg(X(0, g) ^ /ceg) ^ keho). Thus, it suffices to 

show: 

D{h,X),Hj,X] h Vp3mi'^V/^n%(X(0,p),/ + mep,X(0,g) ^/ + meg), 

which follows, in fact, from ii^i[X], that is X{0,p), X{0, q) —^p = q. 

The recurrence hypothesis is \/p{X{n,p) -^ p^ hn) ', 

H2[X] is ypyq{X{n,p),X{.sn,q) ^ q Q p) ; Hq[X] is 3pX{n,p). 

Moreover, we have easily q^p,p ^r\- q^r. Thus, it follows that: 

yp{X{sn,p) -^ p Q hn), i.e. yp3m ^l {X{sn,p), I + mep ^ I + mehn). 
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Now, we have, by lemma \5M 

D{h, X), Ho[X], Hi[X] h X{sn,p), I + mep, l + m£hn—>l + mehsn- 

Therefore, we have \/p3m}^^'il^'"^{X{sn,p), I + mep ^ I + mehsn) that is: 

yp{X{sn,p) -^ p Q hsn), which is the desired result. D 

Lemma 5.8. D{h,X),H{X) h Vn*'^*C[/i„]. 

Proof. We have yn^^^\/p{X{n,p) — )• C[p]) from H-^. Moreover, we have easily: 

h VpVg(C[p],p Q q ^ ^[q])- Thus, applying lemma [5771 we obtain: 

D{h,X),H{X) h VnintVp(X(n,p) -^ C[/i„]). Hence the result, from Ho[X]. D 

Lemma 5.9. D{h,X),H[X] h Vn*'"*3A:"*$(A;, /i,n). 

Proof. By the foundation scheme (SCF), we have: 

h W'^^i^f'^^iJ + neK -^ iJli) + l),i + neK ^ ^} -^W'^Hi + nehn -^ ±). 

But, we have D{h,X),H[X] h Vn^''^C[/i„] (lemmaEH]), therefore: 

D{h,X),H[X] h VnintBiintj + ne/i„. It follows that: 

D{h,X),H[X] h Vnint3iint{vjint(^- + ^g/j^ ^ (j-.^) _^ l),i + ne/i„}. D 

Lemma 5.10. D{h,X),H[X] h C[inf(/i)]. 

Proo/. We have C[inf(/i)] = Vm"^*3i™*(i + me inf(/i)). 

Now, by definition of the function symbol inf , we have: 

h yhW''\ke inf(/i) f^ 3n^'^^^{k,h,n)). 

Therefore h C[inf (/i)] o ym'''^3i'''^3n'''^<^{i + m, /i, n). 

By definition de $, we have trivially h Vn^'^^V/c''^* (<!>(/;;, /i, n) -^ 3f^^{k = i + n)). 

Moreover, we have D{h,X),H[X] h W'^^3k''^^<^{k,h,n) (lemmaE^]). 

Therefore D{h,X),H[X] h Vni'i*3ii'^^ $(i + n, /i,n), thus L>(/i,X), i?[X] h C[inf(/i)]. D 

Lemma 5.11. 

L>(/i,X),i?jX] h V/iV/c*"*VA;'*''Vn*'^Vn'*''*($(/c,/i,n),$(A;',/i,n'),A;' > k^n' >n). 

Proof We have ^{k,h,n) = 3i^^^'^{k,h,n,i), with : 

^{k,h,n,i) = {yf^^ij + nehn -^ {j\i) 7^ 1), i + nehn, k = i + n}. 

Thus, we have to show: 

D{h,X),Hj^X], uii{k), mi{k'), int(n), int(n'), int(i), int(i') h E{h,k,n,i,k' ,n' ,i') -^ ± 

with H(/i, k, n, i, k' ,n', i') = {^(fc, h, n, i), ^{k\ h, n' , i'), k' > k, n' < n} that is: 

H(/i, k, n, i, k' ,n' , i') = 

{Vj^Hj +nehn^ {j\i) 7^ 1), i + nehn, k = i + n, 

Vj' ^^*(i' + n'e hn' -^ ifli') /I), i' + n' e h^' , A:' = i' + n', 

k' > k, n' < n}. 

From n' < n and k = i + n, we deduce n' < k, thus k = j' + n'. 

From k' > k, we deduce i' + n' > k, and thus j' < i' . 

Therefore, we have j' + n' ^hn', i.e. k^hn'. But, from n' < n, we deduce hn ^ hn' 

(lemma l5.5p . thus /c ^ /i„ , which contradicts i + nehn, k = i + n. □ 

By definition of ^, we have trivially h \/n Vk {^{k, h,n) -^ kehn). 

By lemmas [531 and [5 . 1 H we get: 

D{h,X),Hj,X] hyhyk'''^yk''''\n'''^W'''\^{k,h,n),^{k',h,n'),k' >k^ k'ehn). 

Lemma [52] gives yn^'^^3k^'^^^{k,h,n). It follows that: 
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and therefore D{h,X),HjyX] h Vn^nt(mf(/i) C /i„). 

But, we have trivially D{h,X) h \/n}'^^\/kF^^\lp{kehmX{n,p) -^ kep). Therefore, finally: 

D{h,X),Hj,X] h Vni'^Vp(X(n,p) ^ inf(/i) C p). 

We have eventually obtained the desired proof-like term cdc', which completes the proof of 

theorem I5.3i D 

The ultrafilter. In the model TV, we have defined the generic ideal J', which is a unary 
predicate, by putting: JT{p) = IIx {p} for every p G P. 
By theorem 13.51 we have: 

i) llf-^(l) 
ii) ||fVx(-C[x]^^(x)) 

ih) llf VxVy( J(xAy) ^ J{x) V J{y)) 

iv) |hVx(Vy(-C[xAy] ^ J{y)) ^ ^J{x)) 

v) ||^VxVy(J(x),yCx^ J(y)) 

By theorem I3.3t we have |]- F <^ lll~ -^ for every closed first order formula F. 
Remark. A "first order" formula contains quantifiers on the individuals which, by means of the 
symbol e , represent the subsets of N. Therefore, it is a second order formula from the point of view 
of Arithmetic. But it contains no quantifier on sets of individuals. 

By theorems II. 131 and 12. 13( we can use, in F, the quantifier Vx , since the quantifier Vx 
is first order. 
Therefore, we have: 

vi) ||- C[x] o Vm^'^*3n^"*(m + nex) 

vii) II]- y E X -H- 3m^'^* Vn™^ (ttt. + ney — )• m + nex) 
viii) |H-Vn™^nel; |||- VxVyVn^'^^(nexAy o nex A ney) 

since all these formulas are first order. Properties (i) to (viii) show that, in the jB- model J\f, 
the following formula is realized: 

J7 is a maximal non trivial ideal on the Boolean algebra of the subsets of N which are 
represented by individuals. 

Now, by theorems 14.41 and 15.31 the following formula is realized in J\f: 
Every subset o/N is represented by an individual. 

Thus the following formula is realized in TV: 

J' is a maximal non trivial ideal on the Boolean algebra of the subsets o/N. 

Programs obtained from proofs. Let i^ be a formula of second order arithmetic, that 
is to say a second order formula every individual quantifier of which is restricted to N and 
every second order quantifier of which is restricted to 7^(N). 
We associate with F, a first order formula F\ defined by recurrence on F: 

• If F is t = u. Ft = F. 

• If F is Xt, F"!" is teX~, where X~ is an individual variable associated with the unary 
predicate variable X. 

• If F is A -^ 5, Ft is ylt ^ ^t. 
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• If Fis Vx^, Ft is Vx^'^Mt. 

• UF isyXA, Ft is VX-^t. 

We note that, if F is a formula of first order arithmetic, then Ft is simply the restriction 
F of F to the predicate int(x). 

Let F be a closed formula of second order arithmetic and let us consider a proof of F, which 
uses the axiom of dependent choice DC and the axiom UA of ultrafilter on N, written in 
the following form, with a constant J^ of predicate: "JT is a maximal non trivial ideal on 
V(N) ". 

We can transform it immediately into a proof of Ft if we add the axiom RPN of represen- 
tation of predicates on N: \/X3x\/y{ye x o Xy). Thus, we obtain: 
x:\JA, y: RPN, z : DCt h t[x, y, z] : Ft. 

Therefore, we have h u : UA, RPN — )• G with u = XxXyXzt[x, y, z] and G = DCt — )• Ft. 
Thus, G is a first order formula. 

In the previous section, we obtained proof-like terms 9,9' such that (^,1) ||]-C/A and 
{9',1) I If RPN (theorems Sa and [OD- 

Therefore, theorem 12. Ill (adequacy lemma) gives (u*, lu){9, 1){9', 1) ||]- G, that is to say: 
(v, (1„a1)a1) llf G with V = {{ao){ao)u*9)9'. 
By theorem 13. 3^ we thus have 6'qV []- C[(1ua1)a1] -^ G, that is: 
6'qV If C[(1„a1)a1], DCt ^F. 

The axiom DCt is consequence of ACI (axiom of choice for individuals). Therefore, by 
theorem 12.11 we have a proof- like term 770 If DCt. 
Moreover, we have obviously a proof-like term ^0 If C[(1ua1)a1]. 
Thus, finally, we have (J^t'^o^o If -^• 

Then, we can apply to the program (^ = (5gf ^0% all the results obtained in the framework 
of usual classical realizability. The case when F is an arithmetical (resp. 11} ) formula is 
considered in [13] (resp. [H]). 
Let us take two very simple examples: 

If F = \/X{Xl, XO — > XI), we have ( * n . k' . n >- k * tt for all terms k,k' G A and every 
stack vr € n. 

If F = \/m 3n {(j){m, n) = 0), where (/> is a function symbol, then for every ttt, € N, there 

exists n G N such that (f){m, n) = and C,-krn. Tk .it >- K-kn.ir'. 

T is the proof-like term for integer storage, given in theorem II. 13( i). 

vr, K are arbitrary ; therefore, by taking a constant for n, we obtain a program which 

computes n from m. 

6. Well ordering on M 

The ^-model Ai is the same as in the previous section: the set of individuals is P = 'P(n)^. 
Recall that an element of P is called sometimes an individual, sometimes a condition, 
depending on the context. 

We put {m, n) = m+ {m + n){m + n + l)/2 (bijection of N^ onto N). We define a binary 

function 7 : F^ — )■ P by putting: 

^{n,p)[i) = p{i,n) if n G N ; 'y{n,p) is arbitrary (for instance 0) if n ^ N. 

Notation. In the sequel, we shall write pn instead of ^{n,p). Thus, it is the same to give 

an individual p or a sequence of individuals pn (n G N) . 

If i,n G N, we have ||(i,n) ep|| = ||zep„||. 
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We fix a well ordering <i on P = 7^(11) , which is strict (i.e. \/x-'{x<x)) and isomorphic to 
the cardinal 2 " : every proper initial segment of is therefore of power < 2 " . We define a 
binary function, denoted by {p < q) by putting (jxq) = 1 ii p<q ; {p<q) = otherwise. 
Since the relation (p<ig') = 1 is well founded on P, we have (theorem II. lip : 
Y \^yX[yx{yy{{y<x) = l^Xy) -^ Xx) ^VxXx] 
in the ^- model A4, but also in every ,B-model Af. 
We shall write, in abridged form, y <x for (y <x) = 1. 

Thus, in A4 and J\f, the relation o is well founded but, in general, not total. 
It is a strict order relation, in both models ; indeed we have immediately, in the model A4: 
I [|- Vx((2;<ix) / 1) ; / |]-VxVyVz((x<iy) = 1 i-^ {{y < z) = 1 \-^ {x < z) = 1)). 
Since all these formulas are first order, by theorem 13.31 we have also, in the model J\f: 
II]- Vx((x <x) ^ 1) ; II]- VxVyVz((x <y) = 1 i-^ {{y < z) = 1 ^^ {x <\ z) = 1)). 
A condition p G P is also a sequence of individuals pk- Intuitively, we shall consider it, as 
" the set of individuals Pk+i for /cepo " ; we define accordingly the condition 1, the formula 
C[p] which says that p is a non trivial condition, and the binary operation a. 

1 is the empty set, in other words iel^ (i.e. (z,0)£l) must be false. Therefore, we put: 

l(n) = n for every n G N. 

A condition is non trivial if the set of individuals, which is associated with it, is totally 

ordered by <]. Therefore, we put: 

C\p\= y i^ntyf nt i^i^p^^j^p^^ E \pi+i , Pj+i] ) with : 

E[x, y] = {x = y\/x<y\/y<x) that is E[x, y] = {x ^ y,{x <y) ^ l,{y <x) ^ 1 ^ ±). 

The set associated with pAq is the union of the sets associated with p and with q ; therefore, 

we put: 

pAq = r where tq is defined by: ||2iero|| = ||iepo|| ; ||2i + lero|| = ||zego|| ; 

rj+i is defined by: r2i+i = Pi+i ; r2i+2 = qi+i- 

The notation p C q means that the set associated with q contains the one associated 

with p. 

Therefore, we put: 

pCq = Vi^'i*(iepo ^ Bf'^ij eqo,Pi+i = qj+i})- 

Lemma 6.1. 

i) 9 \\-\/p\/q\/r{p Cq,qCr^-pCr) with 6 = XfXgXiXxXh{fix)XjXy{g)jyh. 
ii) 9' \\- \/p\/qyr{p C q ^ p/\r C q/\r) with: 
9' = XfXiXyXui{ei)iu)iy)i{if){d2)iy)XJiu)ido)j 

where dQ,di,d2,e are proof-like terms representing respectively the recursive functions: 
n 1-^ 2n, n >-^ 2n + 1, n i— > [n/2], n i-^ parity of n (e returns boolean values). 

Proof. 
i) We suppose: 

/ If Vi(ent(i),iepo,Vj(ent(j),jego ^ Pi+i + ^j+i) ^ -L) ; 

g If Vj(ent(j),jego,Vfe(ent(fc),A;ero -^ qj+i / r^+i) -^ -L) ; 

X \\-iepo ; h |]- V/c(ent(A;), /cero -^ pi+i ^ ^fc+i) ; and we have i G |ent(i)|. 

It follows that fix \\-'yj{ent{j),j eqo -^ Pi+i 7^ qj+i) -^ -L. 

Suppose that y |]-je(7o and let j G |ent(j)|. 

If Pi+i = (7j+i, then gjyh |]- _L ; therefore gjyh |]-pi+i 7^ 1j+i- We have shown: 

^j^y{a)jyh |]-Vj(ent(i),jego -^ Pi+i 7^ Qj+i)- Therefore {fix)XjXy{g)jyh |]-_L. 
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ii) We suppose: 

/ \\-yi{ent{i),iepo,\/j{ent{j),j eqo ^ Pi+i / Qj+i) -> -L) ; 

y \\-i's{p^r)o ; u |f Vj'(ent(/),y e (gAr)o -^ (pAr)j/+i / {qAr)f+i). 

If we replace j' with 2j", and then with 2j" + 1, we obtain, by definition of a: 

(1) {u){do)f \rJ"eqo -^ {p/\r)ii+i 7^ qju+i ; 

(2) {u) {di )f \\- j" ero-^ (pAr)i/+i / r^/z+i . 
Then, there are two cases: 

• li i' = 2i", we have y \^i" epo and, by (1), {u){do)f' \\-j"eqo -^ pi"+i ^ g/'+i- 
Therefore: 

Xj{u){do)j \\-yj{ent{j),jeqo -^ Pi"+i / qj+i) and it follows that: 

m)id2)t^)y)XJiu){do)Jh±. 

• If i' = 2i" + 1, we have y \\- i" etq and, by (2), {u){di)j" \\- j" er^ -^ rj//+i ^ rj/z+i. 
By making j" = z", we obtain {u)[di)i!' |]-i"ero ^ -L and therefore: 

Thus, in both cases, we get: i{ei/){u)i'y){{{f){d2)i^)y)Xj{u){do)j |]--L- D 

Lemma 6.2. 

i) 9 |]-VpVg(p C q',C[g] — > C[p]) wii/i 
6 = Xf XgXiXi' XxXx' XuXvXw^fi' x')Xj' Xy' {fix)Xj Xy{g)jj' yy'uvw. 

ii) ||- \/p\/q\/r{p C g, C[q'Ar] — )• C[pAr]) in other words |]- \/p\lq{p C q ^- q Q p). 

Proof. 

i) Let / \\-p C q,g \\-C[q], that is: 

/ \\-yi{ent{i),iepo,yj{ent{j),j eqo -^ Pi+i 7^ gj+i) ^ -L) ; 
9 If Vj V/ (ent (j) , ent (j' ),jeqo,j'eqo^E[qj+i,qf+i]) with : 
£;[x, y] = (x / y, (x <] y) 7^ 1, (y <a x) / 1 ^ ±). 

Let x If iepo,2;' |f i'epo,^* hPi+i ¥'Pi'+i,'v h (Pi+i <Pi'+i) / l,w []- {pi'+i <Pi+i) / 1. 
Let y If i ego, v' If /e?o- 

We have gifyy' \\- E[qj+i,qj/+i] ; if pi+i = qj+i and pj/+i = qj/+i, then: 
gifyy' If ^b*+i,K'+i], and therefore gj_fyy'uvw |f ±. 

Thus, we have XjXy{g)jj'yy'uvw |f ent(j), j ego ^> -L if K+i = qj+i and p^z+i = g^z+i. 
Therefore, XjXy{g)jj'yy'uvw |f Vj(ent(j), j ego -> K+i 7^ Qj+i) if K'+i = Qj'+i, thus: 
{fix)XjXy{g)jj'yy'uvw \\- ± if pi/+i = g^'+i, thus: 

^j'^y'{fix)XjXy{g)jj'yy'uvw |f V/(ent(/), /ego ^ Pi'+i / gj'+i). Therefore: 
{fi'x')Xj'Xy'{fix)XjXy{g)jj'yy'uvw \\- ±. 
ii) Follows immediately from (i) and |f VpVgVr(p C g ^- pAr C gAr) (lemma l6.ip . □ 

The following lemma shows that we can build the algebra B and the ,B-model M. 

Lemma 6.3. There exist six proof-like terms ao,ai,a2, (3o, /3i, P2 such that: 

ao If VpVgVr(C[(pAg)Ar] -^ C[pA(gAr)]) ; ai |f Vp(C[p] -^ C[pAl\) ; 

a2 f VpVg(C[pAg] ^ C[g]) ; Po f Vp(Cb] ^ C[pAp]) ; A f Vi.Vg(C[pAg] ^ C[gAp]) ; 

/?2 If VpVgVrVs(C[((pAg)Ar)As] ^ C[(pA(gAr))As]). 

Proof. We only show the first case. By lemma [6T2l f i) . it suffices to find a proof-like term: 
9 If VpVgVr(pA(gAr) C (pAg)Ar). Thus, we suppose: 

y If ^e(pA(gAr))o ; u |f Vj(ent(j),j e ((pAg)Ar)o ^> (pA(gAr))i+i ^ {{pAq)Ar)j+i). 
There are three cases: 
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• i = 2i' ; then, we have y \\- i' epo. We make j = 2i = Ai' , therefore: 
u \\- ent{2i) , i' e po — > pj'+i y^ pi'^i. Thus, we have: (n)(c?o)iy \\~ -^■ 
• i = 4i' + 1 ; then, we have y |-|- i' e qo- We make j = i + 2 = 4i' + 3, thus: 
u \\- ent{i + 2),i' eqo — >■ Qi'+i ^ Qi'+i- Thus, we have: {{u){a)'^i)y \\- _L. 

• i = 4i' + 3 ; then, we have y \\- i' erQ. We make j = i — 3 = 4i', thus: 

u \\- ent(z — 3),i'ero — )• r^/^i ^ r^/^i. Therefore, we have: {{u){p)^i)y \\- _L 

(p is the program for the predecessor). 

Thus, we put 6 = XiXyXu{{{e4i){u){do)iy){{u){a)'^i)y){{u){p)^i)y, where 64 is defined by its 

execution rule: ei-ki.^^.rj.C.TTy^.TT (resp. r/ • vr, (" . vr) if i = 4i' (resp. 4z' + l,4z' + 3). D 

We now show the: 

Theorem 6.4. 

The forcing structure {C,a,1} satisfies the countable downward chain condition in A4.. 

Proof. The hypothesis of the c.d.c. are: 

Hq = \/n3pX{n,p) ; 

Hi = Vn^'"VpVg{A:'(n,p), ;i'(n, q) ^ p = q} ; 

H2 = Vn™VpV^(A'(n,p), A'(sn, q) ^ q^p) ] 

H3 = yn^''^yp{X{n,p) -^ C\p]). 

Moreover, by theorem 12. H we have a binary function f : P^ ^ P such that: 

? If Vn^'i*(3pA'(n,p) ^ 3k''''^X{n, f{n,k))). 

Therefore, by Hq, we can also use the hypothesis: 

H^ = Vn^'ita/t^n^ X{n, f{n, k)). 

Let us put H = {Ho,Hl^,Hi,H2,H3} and H, = {Hq,H'^,Hi,H2}. 

Lemma 6.5. H h VpVgVm^''Vn^''*(;f(m,p), ^^(71,9) -^ 0[p^q]). 

Proof. We show \tm}^^\ln^^^{X{m,p),X{m + n,q) ^ q ^ p) by recurrence on n. 

For n = 0, this follows from Hi, if 3. For the recurrence step, we use H2. 

Thus, we have \/pyq\/m^^^\/n^^^{X{m,p), X{n, q) ^- p Q qV q Q p). 

From p Q q,we deduce C[pAp] -^ C[qAp], and the result follows, by H3 and C[p] -^ C\pAp]. 

D 

We define the wanted limit h by defining ho and hm+i for each m € N. 

For m = {i,n, k) (that is {i, (n. A;)) ), we put ||me/io|| = ||<Y(n, /(n, k)) A ie {f{n, A;))o|| ; 

then hm+i = {f{n,k))i+i. 

Intuitively, X defines a sequence of countable sets, and h is the union of these sets. 

• Proof of H^ \- X{n,p) -^ h Q p. 

By lemma [6T2l fii) ■ it suffices to show X(n,p) — )■ p C h, that is: 
X {n, p) , i e poj^m^"^^ {m £ ho, ^ hm+i "^ Pi+i) -^ -L, for n,i G N. 
We fix A; G N and we put m = [i, n, k). By definition of h, it suffices to show: 
X{n,p),i£po,yk''''^{X{n,f{n,k)),i£{f{n,k))o,^ {f{n,k))i+i ^ Pi+i) ^ ±. 
Now, from Hi,X{n,p),X{n, f{n,k)), we deduce f{n,k)=p and therefore: 
{f{n,k))o = Po and (/(n,A;))j+i = pi^i. Thus, it remains to show: 
X{n,p),i£po,yk'^'^^{X{n,f{n,k)),i£po -^ Pi+i ^ Pi+i) -^ -L. 
But this formula follows immediately from Hq. 
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• Proof of HhC[h]. 

We must show C[/i], that is me ho,m' e Hq — > E[hm+i,hm'+i]- Now, we have: 

m = ii,n,k) ; ||me/io|| = \\X{n, f{n,k)) Aie {f{n,k))o\\ ; /im+i = if{n,k))i+i ; 

m' = {i',n',k') ; ||m'e/io|| = ^(n', /(n', A;')) A i'e (/(n', A;'))o|| ; /i„'+i = (/« fc'))i'+i. 

From A'(n, /(n, fe)), X{n' , f{n', k')), it follows that: 

C[u] with u = f{n,k)Af{n',k') (lemma [63]) . Therefore, we have: 

||ie(/(n, A;))o|| = ||2ien|| ; ||z'e (/(n', A;'))o|| = ||2i' + len|| ; 

hm+l = U2i+1 ', hm'+l = U2i'+2- 

From C[ti], we deduce i?[u2j+i,n2j'+2]! that is £'[/im+i) ^m'+i]- 

This completes the proof of theorem 16.41 □ 

The well ordering on ■p(N). In the model Af, we define the unary predicate: 
g{x) = 3p3i'''^^{^J{p),iepo,x = pi+i}. 

Lemma 6.6. \\^ g{x),Q{y) ^ E[x,y]. 

We must show \ff- ^J{p),^J{q),i£po,x = pi+i,j eqo,y = qj+i -^ E[x,y], that is: 
\h ^Jip)^ ^J'i<l)^i ^ PoJ ^ Qo -^ E[pi+i,qj^i\. 
By theorem 13. 5( ii) and (iii), we have \^ ^J'{p),^J'{q) -^ C[pAq]. 
Therefore, it is sufficient to show that \^C\pAq],iepo,j eqo — )• £'[j)j+i, gj+i]. 
We show below that we have / \\-C[pAq],iepo,j eqo -^ ii^[pi+i,gj+i]. Since this is a first 
order formula, this gives the desired result, by theorem 13.31 
Indeed, we have: pi+i = {pAq)2i+i ; qj+i = {pAq)2j+2 ; 
WiepoW = ||2ie(pAg)o|| ; ||jego|| = Pi + le(pAg)o||. 
Therefore, it remains to show: 

/ If C[pAg],2ze(pAg)o,2j + le(pAg)o -^ E[{pAq)2i+i,{pAq)2j+2] 
which is obvious, by definition of Q[pAq\. D 

Lemma [6. 61 shows that < is a total relation on Q. But, moreover, <i is a well founded relation 
in A/". Therefore, we have: 

|[]- t? is well ordered by <!. 
We define now two functions on P: 

• a unary function 5 : P ^>- P by putting |Iie(5(p)o|| = \\i + lep^W ; (5(p)i+i = Pi+2- 

• a binary function (p : P'^ ^ P by putting: 
\\Oe(t){p,q)o\\ = ; ||i + le(p{p,q)o\\ = \\iepo\\ ; 
<^(P, q)i= Q ; (t>{p, Q)i+2 = Pi+i for every i € N. 

Therefore, we have 5{4){p, q)) = p and 4){p, q)i = q for all p,q £ P and thus: 

/ hypyq{S{(p{p,q)) =p) ; I \\\-ypyq{S{4>{p,q)) = p) ; 

/ hypyq{(t>{p,q)i = q) ; I ||]-VpVg(0(p,g)i = q). 

Intuitively, 6{p) defines the set we obtain by removing pi from the set associated with p ; 

(/)(p, q) defines the set we obtain by adding q to the set associated with p. 

Lemma 6.7. Ifp,q € P, there exists q' & P such that 5{q') = q and pi < q' for every 
i gN. 

For each a G P, we have 5{(j){q,a)) = q. But the application a i-7> (j){q,a) is obviously 
injective, since (j){q,a)i = a. Thus, the set {4>{q,a); a € P} is of cardinal 2 ". Now, by 
hypothesis on 0, every proper initial segment of P, for the well ordering <i, is of cardinal 
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< 2 '^. Thus, there exists some ao € -P such that pi < (pil^o^o) for every z € N. Then, it 
suffices to put q' = (j){q, oq). D 

Therefore, we can define a binary function ip : P'^ ^ P such that we have: 
^{'^{Pi q)) = Q and {pi < Tpi^p, q)) = 1 for all p,q ^ P and i G N. Thus, we have: 
/ |fVpVg((5(^(p,g)) =q) ; I ||]- VpVg((5(V'(p,g)) = q)- 

Ki If ypyqyi''''\pi < ij{p, q)) -, ki ||^ ypyqyi''''\pi < vb, ^))- 

Lemma 6.8. We have \l-yq3x{Q{x),6{x) = q}. 

Proof. This is written as |[]- Vg[VxVpVi'''^*(5(x) = q, iepo, x = pj+i — )■ J{p)) — > -L] or 
else: 

By making i = 0, it is sufficient to show: 

(1) \\^yq[ypiOepo, 6{pi) = q ^ J{p)) -> ±]. 

By replacing p with 4>{p,iIj{P:Q)) in (l); we see that it remains to show: 

\\\-yq^yp J{4>{p,'4'{p,q))). 

Lemma 6.9. \{-\/pyq{C[p] — > C[(j){p,4){p,q))]). 

Proof. We have C[r]=\/^^^^yj^^^{ierQ,jerQ^E[ri-^-l,rj^l]). Therefore, in order to show 
that \\- C\p] -^ C[r], it suffices to show: 

(1) If C\p] -^ Vi^^iVj^n^i + l£ro,j + lero^ E[ri+2,rj+2]) and 

(2) If C [p] ^ Vj^n^ (0 e ro , j + 1 e ro ^ S [n , r,-+2] ) . 

We apply this remark by putting r = (j){p, il}{p, q)). Then (1) is written as |f C|j»] -^ C[p] 
since \\i + lero|| = ||iepo|| ai^d rj_|_2 = Pi+i and the same for j. 
Thus, it suffices to show (2), that is: 

Ifcw^ 

Vi™*(Oe </>(p, V(p, g))o,i + 1 e Hp, V'b, g))o ^ E[(j){p, 7p{p, q))i,<i){p, ip{p, q))j+2])- 
But, we have / If VpVq'(Oe(/)(p,g)o) ; / jf VpVq'(jepo ^i + le'?^(p, V'(p,9))o) ; 

I If VpVg(</'(p,V'(p,g))i = V-Ip,^)) ; I If VpVg((/>(p,V'(p,g))i+2 =Pi+i)- 

Therefore, it remains to show: 
If C[p\ ^ V/^^Hj ePo ^ E[^l,{p, q),pj+i]) 
which is trivial, since we have KI [f VpV(7Vj (pj+i <'ip{p,q)). D 

Lemma 6.10. \i\xXy{{y){a)i)x |f VpVg(p C 4>{p,q)). 

Proof. This is written as: 

\i\x\y{{y){a)i)x |f Vz(ent(z),iepo, Vj'(ent(j), j e(/)(p,g)o -> (/>(p,g)j+i 7^Pi+i) ^ -L) 

which is immediate, by making j = i + \. □ 

We have |f p C (t^{p,il^{p,q)) (lemma fG-lOp . and it follows that: 
\\- (p{p,ip{Pjq)) ^ p (lemma 16 .21 1). and thus \\-C[(j){p,il^{p,q))] -^ C[pA(t){p,ip{p,q))]. 

Therefore, by lemma [6^ we have: 
If VpV(7(C[p] — )■ C[pA(l){p,ip{p,q))]). Since this is a first order formula, we have, by theo- 

rem l3.3t ||f VpVg(C[p] -^ C[pA(l){p,ip{p,q))]) 

and therefore, by theorem 13. Sl fii): ||f VpVg(-iC[pA(/>(p, ■i/'(p, g))] — )■ J{p)). 

Then, we apply theorem 13.61 which gives: ||f Vg-iVp J'((/)(p, ?/'(p, g))) 

which is the desired result. □ 
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Theorem 6.11. The following formulas are realized in M : 
i) There exists a well ordering on the set of individuals. 
ii) There exists a well ordering on the power set of N. 

Proof. 

i) Lemma 16.81 shows that, in M , the function 5 is a surjection from Q onto the set P of 
individuals. But, we have seen that the formula: " Q is well ordered by < " is realized in 
N. 

ii) By theorems 14.41 and 16.41 the following formula is realized in N: " Every subset of N 
is represented by an individual ". Hence the result, by (i). □ 

Theorem I6.11( ii) enables us to transform into a program any proof of a formula of second 
order arithmetic, which uses the existence of a well ordering on M. The method is the same 
as the one explained above for the ultrafilter axiom. 
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